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i2 Users Concerned About 
Vendor's Finances, Future 


Problems continue to 
raise doubts, despite 
improved relations 


BY MARC L. SONGINI 
LAS VEGAS 
Attendees at i2 Technologies 
Inc.’s annual user conference 
last week said the struggling 
software vendor has made no- 
ticeable improvements during 
the past year in how it treats 
customers. But a half-dozen 
users expressed misgivings 
about the myriad financial and 
legal challenges facing i2. 

The Dallas-based compa- 





| ny’s woes deepened just four 


days before the i2 Planet 2003 
conference began, when Nas- 
daq delisted its common stock 
on May 9. That move followed 
five straight quarterly losses 
for i2, disclosure that the sup- 
ply chain vendor is reauditing 
its financial results as far back 
as 1999 and the news that the 
Securities and Exchange Com- 


i2 Concerns, page 16 | 


COO Sam Nakane says i2 has 
ECM eee era al 


Ameritrade’s IT Integration 
With Dateka Religious War’ 


Postmerger CIO tells 
of internal debates 
over consolidation 


BY LUCAS MEARIAN 
Eight months after Ameritrade 
Holding Corp.’s $1.3 billion 
acquisition of rival online bro- 
kerage Datek, its IT depart- 
ment is emerging from the 
bruising experience of inte- 
grating some systems, ditch- 
ing others and handing layoff 
notices to 250 IT staffers. 

“It was a massive conver- 
sion effort,” said Asiff Hirji, 
who took over as CIO of 





Ameritrade last month. He 


months of “religious wars” 
over technology choices and 
now runs its operations on 
systems spliced together by an 
IT staff that by September will 
have been reduced by about 
40% — from 600 employees 
right after the merger to 350. 
Hirji began working with 
Omaha-based Ameritrade last 


| September as a consultant 


from Bain & Co. in Boston. His 
job was to find synergies be- 
tween the technologies and IT 
staffs at Ameritrade and Jersey 
Ameritrade, page 14 
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Users Outraged as SCO 
Stakes Linux Legal Claim 


| Vendor says companies using the OS may face 


liabilities because of Unix code infringement 


| mately.” 





| BY TODD R. WEISS 
| Ina startling development, 


The SCO Group last week put 
corporate Linux users on no- 
tice that they could become 
legal targets as part of its cam- 
paign to enforce intellectual 
property claims it has made 
on Unix. The threat outraged 
many IT managers but left 
some users worried about po- 
tential liabilities. 

In a letter that was posted 
on its Web site and sent by 
mail to about 1,500 large com- 
panies, Lindon, Utah-based 
SCO claimed that Linux is “an 


| unauthorized derivative of 


Unix” and that some of SCO’s 


| code has been illegally incor- 
said the company has survived | 





MORE ON SCO VS. LINUX 


| porated into the open-source 


operating system. It asserted 
that legal risks may extend to 
users that run Linux. 

This is the third major 


punch SCO has thrown at Lin- 
| ux since January, when the 


software vendor said it was 


setting up a technology licens- 


ing division to ensure that 


users and vendors combined 
Unix and Linux code “legiti- 
In March, SCO sued 
IBM, charging it with illegally 


| using Unix technology in con- 
| nection with Linux. 


Joe Poole, technical support 
manager at Boscov’s Depart- 
ment Store LLC in Reading, 
Pa., said Linux users “will not 


| stand for this. There are just 


too many of us now.” Boscov’s 
uses Linux on an IBM zSeries 
mainframe to reduce the num- 
ber of servers it has to manage 
(see related story, page 6) 
Poole accused SCO execu- 
tives of trying to use the legal 


| maneuvers to increase Unix 


technology licensing revenue 

so they can “cash in when 

their company’s failing.” He 
Linux Claim, page 57 
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The Web Services 'sunami 


RIQUE BERTRANL 


‘9 ST (Oss thay 


REPORT 


services 


WHC 


tida iw we of cl 


~ \ inf] project Ss, from applic 


development to CRM and s 


} 1 
ply chain ne 


. Jj 
WOTKS 


ing to sink or sw Wiis | 


report explains what's « 


vour Way. 


omime 


Stories begin on page 25. 


ONLINE EXCLUSIVE. 


Make testing an integral part of Web services: 


QuickLink 38460 
www.computerworld.com 





THERE MAY BE A 
BIGGER INDEPEND 
SOFTWARE PROVID 
OUT THERE 


SOMEWHEF 
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| can’t pull all-nighters every night. 


Thing is, our backup and recovery system has to. 


It can’t rest. 


Not even for a second. 


Not if | hope to get some myself. 


Save the day. 


\ 
\ 


\ 


\ 


Make sure your data’s always safe and you'll save yourself a lot of worry. And work. One way is with EchoView™. A potent, new data- 
ee protection appliance that continually captures and journals data as soon as it's written, for nonstop protection. And EchoView™ provides 
EchoView™ rapid recovery to any point in time, to keep business humming. So while your systems may be disrupted, your nights won't be. 


Learn all the ways we can help you at www.savetheday.com. — ) STORAGETEK’ Save the Day” 
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DEVELOPMENT 


The Web Services Tsunami 

Web services are already being used 
internally for systems integration 
and externally with supply chain 
partners. As one CIO put it, “Web 

services is a tsunami of 

saa technology evolution.” 
a PACKAGE STARTS ON PAGE 25. 


26 The Story So Far. Web services are built on the 
shoulders of earlier technologies, such as 
client/server, EDI and remote procedure calls. 


28 Waves of Change. PBS’s Andre 
V. Mendes (right) says Web 
services will hit IT like a tidal 
wave, affecting a range of ar- 
eas, including the supply 
chain. ONLINE: A former CIO 
discusses “what Web services 
can do for business intelli- 
gence.” © QuickLink 37326 


34 Opinion: Web services are part of a long IT 
standards tradition. As such, be aware that 
they’re limited in what they can do, writes 

columnist Mark Hall. 


36 Web Services in Action. 
Pioneers like Wells Fargo’s Steve 
Ellis (left) are exploiting this new 
technology to make valuable 
connections with customers, 
partners and suppliers. Here’s 
what four companies have 
learned out on the bleeding edge 
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Testing in an Organic World 


of Web services. ONLINE: A small medical 

supplier uses Web services to launch 

e-commerce applications and gain an 

advantage in the mammoth health care 2 
industry. @ QuickLink 37822 


38 Web Services, Simply Put. Are you finding it 
hard to explain Web services to your execu- 74 
tives? In this book excerpt, XML expert 
Frank P. Coyle provides a primer on XML, 
SOAP and Web services. 


40 Testing Is Key to Success. Web services are 
computer-to-computer applications that 
must work flawlessly in e-business. Other- 
wise, a single error could propagate throughout 
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failure of Web services. 
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collection of research and resources. 


44 QuickStudy: A primer on Extensible Access Con- 
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48 The Next Chapter: Industry visionaries predict 
huge job losses for U.S. programmers and worry 
that a hodgepodge of Web services will increase 
information overload, security problems 4 
and management challenges. 

ONLINE: Industry visionaries 
such as Grady Booch weigh 
in with more predictions 
about the future of soft- 
ware development and 

Web services. 
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AT DEADLINE 


SEC Scrutinizes 
Navy/EDS Deal 


The U.S. Securities and Exchange 
Commission last week asked Elec- 
tronic Data Systems Corp. for 
documents related to its $6.9 bil- 
lion Navy/Marine Corps Intranet 
contract, according to a regulato- 
ry filing by the Plano, Texas-based 
company. The request came after 
EDS reported a $334 million pre- 
tax loss on the project during the 
first quarter [QuickLink 38326]. 


Dell Sees Strong Q1 


Dell Computer Corp. last week 
reported that its first-quarter rev- 
enue hit $9.5 billion, an 18% jump 
over the same period last year. 
The growth was largely due to 

a 40% increase in server ship- 
ments. Dell also announced a 
four-year extension to a contract 
with Weyerhaeuser Co. under 
which Dell serves as the forestry 
company’s primary supplier of 
PCs, servers and storage systems. 


IBM WebSphere 
Expands Vertically 


IBM this week is expected to an- 
nounce 11 new or enhanced verti- 
cal-industry offerings as part of its 
WebSphere Business Integration 
platform. The products are intend- 
ed to speed up integration among 
partners and customers in indus- 
tries such as banking, chemicals 
and petroleum. Prices for the 
products, which are already ship- 
ping, start at $225,000. 


Short Takes 


ORACLE CORP. appointed Charles 
Phillips, an experienced Morgan 
Stanley software industry analyst, 
as executive vice president in the 
office of the CEO, reporting di- 
rectly to Larry Ellison. . . . INTEL 
CORP. will unveil its newest chip 
set for premium desktop PCs on 
May 21, according to a source fa- 
miliar with the company’s plans. 

. .. SUN MICROSYSTEMS INC. and 
Oracle are slated to make a joint 
“low-cost computing” announce- 
ment today in San Francisco. 
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IBM Adds Mainframes 


New models double processor count, 
will let users add capacity on demand 





BY ROBERT McMILLAN 
SAN FRANCISCO 
HE MAINFRAME may 
be a dinosaur, but 
it’s a carnivorous 
one. That was IBM’s 
message last week when it 
launched a new mainframe 
line code-named T-Rex that is 
capable of supporting up to 32 
processors — twice what the 
company’s current systems 
can handle. 

IBM said the z990 models 
are built around a 16-chip 
processing module that helps 
provide a nearly threefold per- 
formance improvement over 
its z900 machines. With 512 
I/O channels, the z990 also 
has twice the I/O capability of 
existing mainframes, accord- 


ing to IBM. 


As part of the z990 rollout, 
IBM said it will reduce the 
number of its mainframe of- 
ferings from 42 to four. The 
first two z990s are scheduled 
to become available on June 16 





IBM’s 990 


® A peak processing rate of 
9,000 MIPS on a full 32- 
processor machine. 


® The ability to scale froma 
single CPU to 32 without shut- 
ting down systems. 


= Support for up to 30 logical 
partitions, twice what current 
models offer. 


= A 256GB memory capacity, 
four times what users now have. 


= Up to 512 1/0 channels and 16 

internal TCP/IP links between 

virtual servers. 
and will support eight and 16 
processors. Models that can 
accommodate 24 and 32 CPUs 
are due in October. 

In September, IBM plans to 
release capacity-on-demand 
functionality and pricing for 
the new mainframes that will 
let users turn processing en- 





With Up to 32 CPUs 


gines on or off as their com- 
puting workloads change. 

“The on-demand aspect is 
really a step in a good direc- 
tion,” said Fred Betito, a direc- 
tor in the IT architecture group 
at Levi Strauss & Co. “Being 
able to just, over the phone, in- 
crease your capacity is some- 
thing that is of great value.” 

Betito said that San Francis- 
co-based Levi Strauss recently 
switched from Unix servers to 
a z900 mainframe to run the 
databases that support its SAP 
back-office applications. 

The z990 is the result of 
four years of development 
work, done at a cost of more 
than $1 billion, said William 
Zeitler, senior vice president 
of IBM’s Systems Group. Zeit- 
ler said IBM has added more 
than 100 mainframe users 
since the start of last year, and 
he claimed that 70% of overall 
zSeries sales are coming from 
customers running new types 
of workloads, such as using 
Linux to consolidate servers 
on mainframes. 

Harry Roberts, CIO at 
Boscov’s Department Store 


Shark Array Gets New Disaster Recovery Features 


As part of last week's mainframe 
announcement, IBM introduced 
several enhancements to its 
flagship Shark disk array, includ- 
ing support for long-distance 
data mirroring and for configur- 
ing arrays with up to 6.9TB of 
standby storage capacity. 

The company also cut the 
25% convenience charge 
users had to pay to configure 
standby capacity on their arrays 
down to 10% of what it would 
cost to buy the disk drives out- 
right. For example, if the list price 
for the disk space being put in 
standby mode is $100,000, the 
convenience charge will be 
$10,089. 

Once standby drives are 
used, users pay the remainder 


of the purchase price, IBM said. 

IBM is also adding a new ver- 
sion of its FlashCopy software 
for the Shark arrays, which are 
formally known as the Enterprise 
Storage Server product line. Ver- 
sion 2 of FlashCopy can transfer 
up to 10 times more data than 
the previous release, and up to 
12 different target systems can 
receive point-in-time copies 
from the software, according to 
Jim Tuckwell, marketing manag- 
er at IBM's storage division. 

The various upgrades are 
scheduled to become generally 
available June 27, IBM said. 

Mike Kahn, an analyst at The 
Clipper Group Inc. in Wellesley, 
Mass., said the new features 
could be significant, depending 


on a company’s needs. The up- 
grades further automate func- 
tions that are available with more 
limited functionality on older 
Shark models, such as sending 
copies of data over thousands of 
miles asynchronously for disas- 
ter recovery purposes, he said. 

For example, instead of stor- 
ing an entire data set as the ex- 
isting snapshot copy capabilities 
require, users will now be able to 
copy data on a transactional ba- 
sis to backup arrays in separate 
data centers. Remote copies of 
data can be transferred across 
the country and cascaded to a 
second disaster recovery site for 
increased protection against 
data loss, IBM said. 

~ Lucas Mearian 





www.computerworld.com 


LLC, said the Reading, Pa.- 
based company has found the 
mainframe to be an ideal plat- 
form for server consolidation. 
Boscov's cut its 90-system 
server farm in half by transfer- 
ring applications to Linux par- 
titions on a z900, he said. 

The z990 promises even 
better performance for Linux- 
based applications, Roberts 
said. “This isn’t the mainframe 
of our youth,” he noted. “This 
is a flexible, sophisticated en- 
terprise computing platform.” 

Gordon Haff, an analyst at II- 
luminata Inc. in Nashua, N.H., 
said IBM’s mainframe business 
has gotten a boost from its re- 
cent success with Linux, which 
the company claims accounted 
for 17% of its $3 billion in 
zSeries sales last year. 

The z990 rollout furthers 
IBM’s attempt to convince 
users that mainframes are still 
a relevant data center technol- 
ogy, Haff added. “IBM’s mak- 
ing a real effort to introduce 
this as something that fits into 
the server line as a whole and 
isn’t arcane,” he said. D 


McMillan is a reporter for the 
IDG News Service. 


Corrections 


The first name of Tim Stett- 
heimer, CIO at St. Vincent's Hos- 
pital in Birmingham, Ala., was 
misspelled in the May 5 story 
“Wireless Gets Down to Busi- 
ness.” The story also stated that 
United Parcel Service Inc. was 
planning to roll out a new hand- 
held terminal for its drivers early 
this year. UPS announced the 
DIAD IV on April 15 but said de- 
ployments will begin next year af- 
ter testing is completed. In a re- 
lated move, UPS plans to start 
delivering higher-speed wireless 
services to its U.S. delivery fleet 
this year [QuickLink 36717]. 


Another story in the May 5 Spe- 
cial Report on mobile and wire- 
less technology (“Working-class 
Wireless”) misstated the size of 
the product library that Sears, 
Roebuck and Co. loads onto the 
laptop PCs used by its service 
technicians. The library contains 
data on about 4.5 million parts. 
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Rational Software Set to Roll 
Out Rapid Development Tool 


development for building Java apps 





BY CAROL SLIWA 
IBM’s Rational Software divi- 
sion this week will announce a 
rapid application development 
(RAD) tool that’s designed to 
reduce the complexity of 
building enterprise-class Java 
applications. 

Rational declined to discuss 
the product’s name, price or 
shipment date when it pre- 
viewed the tool at IBM’s devel- 
operWorks Live conference 
last month in New Orleans. 
But tomorrow the Lexington, 
Mass.-based unit will disclose 
that IBM Rational Rapid De- 
veloper is due for release next 
month and will sell for $5,995. 

The tool goes beyond tradi- 
tional RAD offerings in its 
support for visual-model- 
driven development and the 
Unified Modeling Language 
(UML), its use of prebuilt pat- 
terns for building scalable 
multitier applications, and its 
ability to simplify integration 
with existing systems, said 
Arun Gupta, chief technolo- 
gist of enterprise applications 
at Rational. 

Gupta said the tool, which 
Rational acquired last year 
from NeuVis Inc. in Shelton, 
Conn., can generate about 
90% of the code for Java appli- 
cations, leaving only a small 
percentage of business logic to 
be written by developers. 

Steven Edwards, a senior 
manager at McLean, Va.-based 
BearingPoint Inc., said a team 
of developers working on new 
claims software for the insur- 
ance industry was able to au- 
tomatically generate 65% to 
70% of the application code 
with Rational Rapid Develop- 
er. The tool also helped the 
team cut development time 
by 40%, he said. 

The application’s size and 
the need to quickly get it to 
market prompted the develop- 
ment team to use the model- 





driven tool, Edwards said. 


“You can maintain consistency | 


in your development stan- 
dards, so when you make 
changes to your code, it will 
propagate through all your 
classes,” he noted. 

But how great an impact the 


| Rational product will have 


among corporate developers 


phy, an analyst at Meta Group 
Inc., said developers are look- 


| ing for tools that can ease the 


IBM unit supports visual-model-driven | 


difficulty of building Java ap- 


| plications. But, he added, they 





will have to overcome fears 


| that visual-model-driven de- 


velopment approaches won't 
scale or produce code that can 
be maintained. 

Adoption of model-driven 


| RAD tools has been slow be- 


cause the products are just be- 
ginning to mature, said John 
Meyer, an analyst at Forrester 


| Research Inc. in Cambridge, 
remains unclear. Thomas Mur- | 


Mass. But Meyer predicted 
that the adoption rate will pick 
up as developers realize that 





their efficiency will be limited 
unless they start to rely on 
these types of tools to generate 
application plumbing code. 
Rational will aiso introduce 
an automated software testing 
tool that is due by the end of 
next month and will sell for 
$2,995. The company also 


| plans to announce enhance- 


ments to its XDE Professional 
design and development envi- 


| ronment, which will now be 


called IBM Rational XDE De- 
veloper. New features include 
a debugging capability that 
will let users see application 
runtime errors and create 
UML models, plus integration 


time analysis tool. 

In addition, the IBM unit 
will upgrade its Rational Uni- 
fied Process, a framework of 


Vendors Develop Technology to Help 
Users Monitor Network Configurations 


Software tracks 
changes, pinpoints 


errors for IT pros 


BY MATT HAMBLEN 
Two small vendors this week 
will announce network config- 
uration management products 
designed to give IT managers 
greater control over switches, 
routers and other network de- 
vices made by different hard- 
ware vendors. 

Rendition Networks Inc. in 
Redmond, Wash., today plans 
to launch Version 2.0 of its 
TrueControl configuration 
management software, which 
was initially released in De- 
cember. Gold Wire Technol- 
ogy Inc. in Waltham, Mass., 
plans to follow tomorrow with 
the release of a pair of config- 
uration control appliances. 

Meanwhile, Austin-based 
AlterPoint Inc. last week an- 
nounced an upgrade of its 
DeviceAuthority software. 

Early users said the tools 
are helping them detect con- 
figuration problems that can 
lead to network downtime, 
which often results from hu- 
man mistakes as simple as a 
typographical error in a router 





configuration command. 
Jim Sherer, director of 


| ASP operations at ADP Inc.’s 


Dealer Services unit in Hoff- 
man Estates, IIl., installed 
Gold Wire’s Formulator 200 
appliance in February to man- 
age and monitor access to 
systems that are maintained 
by 1,700 technical support 


| workers. 


Sherer said that if a network 
outage were to occur, he could 
use Formulator to track how 
configuration changes affect- 
ed the overall network at ADP 


| Dealer Services, which pro- 


vides computer services to 
more than 16,000 auto and 
truck dealers in North Ameri- 
ca and Europe. 

“Now we have the ability to 


| say, ‘We saw you came in and 


performed this adjustment,’ ” 
he noted. 


| Addressing Demand 


Formulator can also be used 


| to restrict technicians from 


making additional changes if 
they’re causing network prob- 
lems, Sherer said. But, he not- 
ed, one of his main goals is to 
educate ADP’s IT workers. 
“It’s not a ‘Big Brother is 
watching’ kind of thing as much 





as a training tool,” he said. 
The market for configura- 
tion management technology 
is starting to take off because 
sO many companies are put- 
ting more demands on their 
networks by adding Web ser- 


Product Details 
Rendition’s 
TrueControl 2.0 software 


@ Runs on Windows 2000 systems 


PRICING: Starts at $29,990 for 
managing 75 network devices 
Gold Wire's 

Formulator 200 product line 
includes a 1U rack-mounted appii- 
ance with an 80GB disk drive and a 
cluster of two appliances with hot 
fail bili 


PRICING: Starts at $25,000 
for an appliance serving 50 
network devices, and $100,000 
for a cluster 


Ce eeeecrcesseosesseseossseees 


AlterPoint's 
DeviceAuthority 1.1 software 
w Runs on Windows NT or Win- 
dows 2000 Professional systems 
PRICING: An enterprise edition 
starts at $7,995 and supports up to 
100 devices 








Coming From IBM’s 
Rational Division 


best practices for software 


| development projects. Eric 


Schurr, vice president of mar- 
keting at Rational, said content 


| will be added for functions like 
of the Rational PurifyPlus run- | 


testing, data modeling and 


| business modeling. Other fea- 
| tures will make it easier to 


configure, customize and per- 
sonalize the framework. D 


vices and data-rich applica- 


| tions such as multimedia, said 
| Dennis Drogseth, an analyst at 
| Enterprise Management Asso- 


ciates in Boulder, Colo. 
Large networking vendors 


| like Cisco Systems Inc. sell 


configuration management 


tools, but only for their own 


devices, Drogseth said. He 
added that multivendor con- 
figuration management prod- 


| ucts are currently being of- 


fered by smaller companies 


| such as Rendition, Gold Wire, 
| AlterPoint, Voyence Inc., Eco- 


ra Corp. and Intelliden Inc. 
Chad Uretsky, a network 
engineer at NetIQ Corp., said 
the San Jose-based developer 
of systems and security man- 
agement software this week 
plans to install Rendition’s 
TrueContro! 2.0 package. That 


| should give NetIQ’s IT staff 


the ability to automatically 
gather serial numbers from 
network devices to help with 
inventory audits, he said. 

NetIQ has been using the 
initial version of TrueControl 
for the past four months. 

“It really keeps track of 
configurations for easy recov- 
ery and changes if somebody 
makes a mistake,” Uretsky 
said. “People are prone to 
make typos when configuring 
routers and switches, even the 
most experienced network 
engineers.” D 
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EMC Shifts Course, 
Offers Software Online 


Users can purchase subscriptions for 


SAN design, performance analysis tools 





BY LUCAS MEARIAN 
OR THE FIRST TIME, 
EMC Corp. last week 
made available a sub- 
scription-based soft- 
ware service built around its 
ControlCenter storage 
management software. 
The Hopkinton, 
Mass.-based company 
unveiled two Web-based prod- 
ucts, including a storage-area 
network (SAN) modeling tool 
that guides IT architects and 
administrators through the de- 
sign and validation stages and 
provides a final blueprint or 
suggestions for upgrades 
based on user input. 
“At the end of the day, the 
output is a complete end-to- 


end topology of your new 
SAN with proposed changes,” 
said Pat Cassidy, director of 
marketing for EMC’s open- 
software division. 

Randy Carter, storage archi- 
tect at Philadelphia- 
based mortgage insur- 
er Radian Group Inc., 
has been beta-testing 
the SAN Architect technology 
and said it has cut the time it 
takes to map changes to his 
existing architecture from 24 
hours to just four. 

EMC also introduced Auto- 
Advice, which provides cus- 
tomized analysis of perfor- 
mance and resource utilization 
across applications, servers, 
databases and storage systems. 





AutoAdvice is being sold 


under a one-year subscription 


that covers analysis of one to 
50,000 CPUs, starting at $400 
for a single processor. SAN 
Architect is also available on 
a subscription basis, with an 
entry-level list price of $2,400. 


Others to Follow 
Steve Kennison, an analyst at 
Enterprise Storage Group in 
Milford, Mass., said EMC is 
only the second major storage 
vendor to offer a diagnostic 
and alert tool of AutoAdvice’s 
caliber. But Kennison said oth- 
er vendors, such as Hewlett- 
Packard Co., Sun Microsys- 
tems Inc., Hitachi Data Sys- 
tems Corp. and IBM, are likely 
to follow suit, because it will 
give them a larger software 
footprint in data centers. 
Mountain View, Calif.- 


Data Center Security Spending 
On the Rise, Surveys Show 


Security projects 
get funded despite 
tight budgets 


BY JAIKUMAR VIJAYAN 
As director of global security 
at Hewitt Associates LLC, Dan 
Josephites is taking a multifac- 
eted approach to bolstering 
defenses at his company, the 
largest human resources out- 
sourcer in the U.S. 

Firewall, antivirus and other 
intrusion-detection technolo- 
gies are a key part of the strat- 
egy. But Hewitt is also shoring 
up its internal networks, per- 
forming network and applica- 
tion-level penetration testing 
and working with developers 
to ensure that the code on all 
Web-facing applications is se- 
cure. “We are spending more 
on security; there’s no two 
ways about it,” Josephites said. 





And Hewitt isn’t alone. A 
survey released last week by 
the Data Center Institute at 
Orange, Calif.-based AFCOM, 
an association for data center 
professionals, shows that in 
the face of constant terrorism 
alerts, the war in Iraq and pro- 
liferating cyberthreats, infor- 
mation security has become a 
bigger priority for the nation’s 
largest data centers. 

According to AFCOM, near- 
ly half of the 257 data center 
managers it surveyed earlier 
this year said their companies 
had increased security bud- 
gets by 5% to 15% in the past 


| year. AFCOM’s findings are 


nearly identical to the results 
of a worldwide survey of 500 
financial services firms that’s 
being released this week by 
Deloitte Touche Tomhatsu. 
Deloitte said that despite tight 
IT budgets, most financial 





firms have maintained or in- 
creased their security spend- 
ing and boosted IT security 
staffing levels. 

The budget increases come 
at a time when a growing 
number of companies face the 
threat of external and internal 
cyberattacks, said Jill Eckhaus, 
AFCOM'’s president. “The 
most surprising thing in my 
mind was that almost 30% of 
the companies surveyed did 
have a breach of security last 
year,” she said. 

In the Deloitte survey, 40% 
of the respondents reported 
security breaches in the past 
year — with most of them 
coming from external sources. 

Growing concerns about 
cyberattacks have made “the 
approval process for security 
spending somewhat easier,” 
Josephites said. “It is very, 


' very difficult to ‘ROI’ security, 
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based Veritas Software Corp. 
in December signed a deal 
with Austin-based Motive 
Communications Inc. to re- 
sell its Enterprise Service So- 
lution for Storage Networks, 
which resides on a server in- 
side corporate firewalls and 
alerts IT staff to SAN prob- 
lems. Veritas is bundling the 
tool as part of its business- 
critical support offering. 

EMC’s AutoAdvice collects 
information every five min- 
utes about a company’s SAN 
via a TCP/IP-based portal and 
collates that information in a 
database. A rules-based en- 
gine then measures best prac- 
tices against what the SAN en- 
vironment currently has. 

The analysis takes a day, 
and results are returned 
to users in HTML-enabled 
e-mail messages. The reports 
show where current or poten- 
tial problems are likely to 
come from and provide a 
graphical user interface indi- 
cating the severity of warn- 
ings from a high-level view. 

They also include specific 
details on such things as CPU 


but my management under- 
stands that it is the cost of do- 
ing business these days.” 

“T’m not having any trouble 
getting money for security,” 
said David Krauthamer, direc- 
tor of information systems at 
Advanced Fibre Communica- 
tions Inc., a Petaluma, Calif.- 
based maker of telecommuni- 
cations equipment. The use of 
virtual private networks and 
an increase in the number of 


eee 
than last year’s? 


Base: 257 data center managers 
surveyed earlier this year 
SOURCE: AFCOM'S DATA CENTER INSTITUTE, 
ORANGE, CALIF. 








EMC Goes ASP 


utilization and I/O through- 
put, Cassidy said. The analysis 
contains links to vendor Web 
sites for information on tech- 
nology like host bus adapters 
and switches. 

Cassidy said the results 
produced by SAN Architect 
can be viewed either with 
Microsoft Visio presentation 
tools or in Excel spreadsheets 
and can be kept online or 
printed out. D 
READ ON 
For more on this subject, visit our Storage 


Knowledge Center: 


QuickLink k1700 
www.computerworld.com 


workers connecting to the 
company’s network from out- 
side its offices has made re- 
mote access a major security 
concern, Krauthamer said. 


Securing IM 

Kevin Ott, vice president of 
technology at Terra Nova 
Trading LLC, a financial ser- 
vices firm in Chicago, said it’s 
not just a question of staying 
on top of the growing number 
of hacker threats. Terra Nova 
also has to respond to cus- 
tomer demand for instant 
messaging support on its net- 
work. That means investing in 
technologies to secure and 
archive such communications 
— measures the company has 
already invested in for internal 
messaging use. 

Despite the increased 
spending, only about 5% of 
the respondents to Deloitte’s 
survey claim to be extremely 
confident about their ability 
to withstand attacks, accord- 
ing to Ted DeZabala, a partner 
in the firm’s security services 
group. D 
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Build a scalable 
data warehouse 
with a single 
point of control. 
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Only SAS provides a high-impact, low-risk way 
to achieve intelligent data warehousing. You can 
extract, transform and load data from any source, 
across any platform, while assuring quality. 
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Chip Glitch Halts 
IBM Server Sales 


After Intel Corp. disclosed that 
an electrical problem can cause 
some of its 64-bit Itanium 2 proc- 
essors to shut down or behave 
unpredictably, IBM stopped ship- 
ments of the Itanium 2-based 
server it released in late April. 
Hewlett-Packard Co. and 
Unisys Corp. plan to continue sell- 
ing systems that use Itanium 2 
processors. Intel said it will swap 
older chips for new ones upon 
user request. 


CSC Expands IT 
Outsourcing Deal 


Computer Sciences Corp. (CSC) 
said it has signed four contracts 
that expand a 12-year-old IT out- 
sourcing deal with General Dy- 
namics Corp. in Falls Church, Va. 
The new agreements are worth a 
total of $137 million, CSC said. 

The El Segundo, Calif.-based 
company also reported a $162.7 
million profit on revenue of $3.08 
billion for its fourth quarter, which 
ended March 28. 


IBM Buys Vendor of 
Provisioning Tools 


IBM announced that it has ac- 
quired Toronto-based Think Dy- 
namics, a developer of software 
that provides automated system- 
provisioning capabilities. The 
companies didn’t disclose the fi- 
nancial terms of the deal, which is 
intended to augment IBM’s on- 
demand computing strategy. IBM 
said Think Dynamics developers 


will be blended into its Tivoli man- 


agement software unit. 


Short Takes 


Blue Bell, Pa.-based UNISYS said 
it plans to announce next month 

a set of business process model- 
ing tools that will be marketed as 
part of a new IT services offering 
called Business Blueprints. . . . 
GARTNER INC. predicted that 30.7 
million PCs will be shipped world- 
wide this quarter, up 6.4% from 
a year ago. 
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MARK HALL # ON THE MARK 


IT Infrastructure ‘Game’ 
All but Over... 


... for vendors seeking high growth, claims ex-Lotus exec Steve Layne, 
who’s now CEO of Malvern, Pa.-based Entigo Corp. The new game, he 
says, is identifying areas long neglected by IT pros and then delivering 
a “targeted fix.” For Entigo, the target is automating the handling of 
product warranties. According to generally accepted accounting prin- 
ciples — you know, the ones so highly prized at the former Arthur Andersen — 
companies must reserve funds on their balance sheet to cover war- 


ranty liabilities. So, having precise data 


SA. The price tag for an Entigo imple- 


on a company’s financial exposure in this 
area is vital to a CFO. And managing 
warranties isn’t cheap. Layne points out 
that 80% of warranty processing current- 
ly requires human intervention because 
the aging mainframe or minicomputer 
home-brewed programs that keep track 
of faulty-product claims lack the refined 
rules engines available now. His company 


mentation isn’t cheap, reaching up to $1 
million. So read the software warranty care- 
fully. # “Clients have ceased believing the 
claims of vendors,” says Mark Ruddock, 
CEO of Toronto-based software vendor 
Inea Corp. Whether or not you believe 
that statement will depend on how much you 
trust vendors, of course. Nevertheless, 
Ruddock says a vendor’s credibility, such 





will replace Version 3.5 of its software 


with Entigo Warranty 4.0 
in late June, adding fea- 
tures for handling multiple 
warranties in a supply 
chain, plus more out-of- 
the-box reports and ana- 
lytics on all manner of 
warranty statuses. Entigo 
also has a deal to output 
data to SAS Institute Inc.’s 
analytical tools. To im- 
prove its workflow au- 
tomation, which Layne im- 
plies could reverse the man- 
ual review of warranty claims 
to a mere 20%, Entigo 
tossed aside its own rules 
engine in the 4.0 release 
and integrated one devel- 
oped by Paris-based Ilog 


VERS i i a] 
Salem, N.H., plans to ship 
this week SuppliLink 2.0, 
software that calculates in- 
ventory changes based on 
Merle Mes ITER Tele) (crt) 
rR Teel coercing gee 1e) 016) 
the changes from warehouse 
PCH SMU B CRM Ul! ty 
are then reported to a SQL 
Server database. An Oracle 
NESE SRR OL Com Lt 
upgrade was completely 
rewritten in Microsoft's .Net 
acm rele Tt 
other applications. 


MatrixOne Upgrades 


BY JAIKUMAR VIJAYAN 


MatrixOne Inc. this week 
plans to upgrade its product 
life-cycle management (PLM) 
software by adding two new 
applications and other fea- 
tures such as improved end- 
user collaboration capabilities. 
PLM products like the new 
Matrixl0 software from West- 
ford, Mass.-based MatrixOne 
are attractive to manufacturers 
because they can help compa- 
nies achieve significant prod- 


as it may be, remains vital — especially 


when the software selec- 
tion process “in the last 12 
months has become the 
most onerous I can re- 
member.” So, he noted, 
Inea “does not try and 
overhaul the future” for 
everyone. Instead, the 
company is focusing on 
the financial services are- 
na with its Inea Perfor- 
mance Management Suite. 
The software is now in in- 
carnation 2.4, but Version 
3.0 is in beta-testing with a 
goal to go gold by summer’s 
end. It measures corporate 
performance in areas such 
as budgeting, planning 





and forecasting, and pro- 


PLM Suite 


duces reports for internal users as well as 
financial regulators. Ruddock says that 
among other new goodies in 3.0, you can 
expect to see improvements to the soft- 
ware’s capital planning functions and 
new tools for compensation manage- 
ment. Believe him or not. ® Today, the 
Eclipse open-source development framework 
is due to get a boost when Instantiations 
Inc. in Portland, Ore., ships its CodePro 
Express package for developers who 
work at companies with fewer than 1,000 
employees. The new product comple- 
ments the company’s CodePro Studio for 
large organizations. The difference be- 
tween the two is price — $199 for Ex- 
press and $599 for its big brother — and 
the number of functions in their various 
features. For example, in Express you get 
150 audit rules for checking the quality of 
your code, vs. 300 in Studio. You can ex- 
pect more from Instantiations soon. The 
company has a seat on the Eclipse board 
and is leading an open-source effort called 
Koi, which is building developer collabo- 
ration tools into Eclipse. The company 
will add instant messaging and peer-to- 
peer tools to its products by the end of 
September. ® Tired of fielding requests 
from tech-impaired execs who can’t keep 
track of their files? Punch Networks Corp. 
thinks it may have a fix for you. Next 
week, the Seattle-based company plans 
to ship Punch WebDrive Sync Engine, 
client-level code that works with the 
company’s online storage service. The 
software will synchronize the most re- 
cently modified files for up to 10 Win- 
dows devices on a single account. It en- 
crypts the data for transmission and 
keeps all files up to date in the My Docu- 
ments folder of the devices at a cost of 
$99 per year for 1OOMB, which should be 
adequate for most suits. Engineers and 
field-support staffers might prefer the 
$800-per-year 1GB plan. Companies that 
want to talk at the terabyte level can negoti- 
ate their own contracts. D 


formulations. The software is 
expected to help the company 
better control both raw and 


uct-development efficiencies, 
users said. But they added that 
deploying the tools can be 
complex and time-consuming. 
Jeff Davey, manager of inte- 
grated engineering at Siemens 
Dematic AG, a maker of facto- 
ry automation systems with its 
U.S. headquarters in Grand 
Rapids, Mich., said the compa- 
ny is using MatrixOne’s appli- 
cations to set up a centralized 
repository of project, configu- 
ration, design and other prod- 








uct-related data that can be si- 
multaneously accessed by all 
of its design teams. 

The cross-functional view 
provided by PLM can improve 
time to market, said Mark 
Brewer, vice president of IT at 
H.B. Fuller Co., a maker of 
specialty chemical products in 
St. Paul, Minn. 

H.B. Fuller uses Electronic 
Data Systems Corp.’s Team- 
center PLM software to man- 
age the design of its chemical 





formulated materials, Brewer 
said. “It’s been controlled 
chaos without it,” he said, 
adding that the lack of well- 
defined processes has resulted 
in product overlaps. 

But deploying PLM applica- 
tions can be a big challenge 
for IT managers from both a 
technology and business proc- 
ess standpoint, according to 
Davey. “Whatever time you 
think it will take to deploy 
PLM, just triple it,” he said. D 





ROBUST OBJECT DATABASE 


Our post-relational database. 
The end of object-relational mapping. 


For your next generation of applications, 
move to the next generation of database technology: 
Caché, the post-relational database. 

What makes Caché “post-relational”? It provides 
developers three integrated data access options which 
can be used simultaneously on the same data: an 
advanced object database, high-performance SQL, 
and rich multidimensional access. 

Because Caché’s architecture is a multi- 
dimensional structure, applications built on it are 
massively scalable and lightning-fast. 

Plus, no mapping is required between object, 
relational, and multidimensional views of data. 

This means huge savings in both development and 
processing time. And, Caché-based applications 
don’t require frequent database administration or 
hardware and middleware upgrades. 


More than just a database system, Caché 
incorporates a powerful Web application develop- 
ment environment that dramatically reduces the 
time to build and modify applications. 

The reliability of Caché is proven every day in 
“life-or-death” applications at hundreds of the largest 
hospitals. Caché is so reliable, it’s the world’s leading 
database in healthcare — and it powers enterprise 
applications in financial services, government and 
many other sectors. 

We are InterSystems, a specialist in database 
technology for 25 years. We provide 24x7 support to 


four million users in 88 
InterSystems # 


countries. Caché is available i 
for Windows, OpenVMS, 29 CACHE 
Mac OS X, Linux and i 


major UNIX platforms. Make Applications Faster 


Download a fully-functional version of Caché or request it on CD for free at www.InterSystems.com/post-relational 


© 2003 InterSystems Corporation. All rights reserved. InterSystems Caché is a registered trademark of InterSystems Corporation. 
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Automakers Plan 
Messaging System 
Covisint LLC, a business-to-busi- 
ness exchange, said it’s working 
with the Big Three automakers 
and three suppliers of automotive 
parts to develop an XML-based 
data messaging system. The 
system is due late this year and 
will be marketed as an alternative 
to electronic data interchange 
technology for the auto industry, 
according to Southfield, Mich.- 
based Covisint. 


CA Narrows Loss, 
Has Higher Sales 


Computer Associates Internation- 
al Inc. reported a $106 million 
loss on revenue of $801 million 
for its fourth quarter, which ended 
March 31. That compares with a 
year-earlier deficit of $238 mil- 
lion on $772 million in revenue. 
CA said software license fees un- 
der its subscription-based pricing 
model totaled about $392 million 
in the fourth quarter, up from 
$270 million a year ago. 


Judge Calls for 
Microsoft Reports 


The federal judge overseeing the 
Microsoft Corp. antitrust case 
ordered the U.S. Department of 
Justice and the states involved in 
the case to file reports every six 
months detailing what the soft- 
ware vendor is doing to comply 
with the terms of a settlement 
deal approved last fall. The first 
report is due to be filed to U.S. 
District Court Judge Colleen 
Kollar-Kotelly by July 3. 


Short Takes 


ORACLE CORP. this week plans to 
announce an upgrade of its sales 
management application with new 
templates for creating sales pro- 
posals. . . . GATEWAY INC. dis- 
closed that the U.S. attorney for 
Southern California has opened a 
preliminary inquiry into alleged 
accounting improprieties at the 
Poway, Calif.-based PC maker. 





W3C Readies New 
‘Tech Patent Policy 


Aims to prevent vendors’ patent claims 
from blocking Web standards work 





BY CAROL SLIWA 
HE World Wide Web 
Consortium (W3C) 
is poised to unveil 
a formal policy 

for dealing with technology 

patents that have the potential 

to block the development of 

interoperable Web standards. 
Tim Berners-Lee, director of 

the Cambridge, Mass.-based 

W3C, said a decision on the 

patent policy is due to be an- 

nounced “very shortly,” now 
that the organization’s manage- 
ment team has reviewed feed- 
back collected during a public 
comment period that ended 

April 30. He declined to dis- 

close details of the new policy. 

A W3C working group has 
spent more than three years 


| developing a precisely defined 


patent policy to replace the 
“minimalistic” and “very 
loose” provisions that current- 


| ly require members who know 


of patent claims relevant to 
ongoing standards work to 
disclose them, said Daniel 
Weitzner, chairman of W3C’s 
patent policy working group. 


Bridging a Gap 

Weitzner said the policy draft- 
ed by the working group re- 
flects the “overwhelming goal” 
of producing standards that 
can be implemented royalty- 
free. But the group also in- 
cluded an exception provision 
that will make it possible for 


| members to consider alternate 


licensing terms when it’s 
deemed impossible to meet 
the royalty-free goal, he said. 
That reflected a desire 
for flexibility as well as the 
group’s attempt to acknowl- 
edge the concerns of those 
who favor a so-called reason- 
able and nondiscriminatory 
model that permits the collec- 
tion of patent licensing fees, 
Weitzner said. 





The need to establish a for- 
mal policy became apparent 
as some patent holders started 
to assert claims to technology 
being used as part of proposed 
Web standards. One notable 


case involved a claim from 


Seattle-based Intermind Corp., 
now known as OneName 
Corp., that the W3C’s Platform 
for Privacy Preferences might 
infringe on a patent it held. 
More recently, the W3C’s 
patent policy became a hot 
topic of discussion among 
some W3C members who have 
speculated why IBM, Microsoft 
Corp. and other vendors have 
been submitting some key Web 
services standards proposals to 
the Organization for the Ad- 


vancement of Structured Infor- 
mation Standards (OASIS) in- 
stead of the W3C. 

IBM and Microsoft insisted 
that their decision to propose 
a Business Process Execution 
Language (BPEL) specification 
within Billerica, Mass.-based 
OASIS had nothing to do with 
patent issues -—— a claim they 
backed up when they submit- 
ted BPEL to OASIS under roy- 
alty-free terms [QuickLink 
38188]. The companies said 
they chose OASIS because 
they felt it was the more appro- 
priate standards body for high- 
level business specifications. 

Karla Norsworthy, director 
of dynamic e-business tech- 
nologies at IBM, said IBM’s in- 
tention in the core Web ser- 
vices space is to submit only 
proposals for which it would 
| provide a royalty-free license, 
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since there’s a need for broad 
adoption of Web services 
standards. 

But Norsworthy said she can 
see a need for the exception 
provision in the patent policy 
proposed by the W3C to allow 
a working group to decide to 
publish a specification, even 
if a patent claim is raised. “I 
think the W3C is being practi- 
cal in allowing a specification 
to go forward and working out 
the [intellectual property] 
from some third party as they 
go,” she said. 

Don Deutsch, vice president 
of standards strategy at Oracle 
Corp., said the provision was 
a last-minute compromise de- 
signed to address the concerns 
of IBM and Microsoft. Deutsch 
added that he expects it to be 
approved. 

Weitzner said the exception 
provision “was an effort to ad- 
dress the concerns of a num- 
ber of members.” He added 
that the proposed exception 
procedure was designed to 
be hard to use “because the 
working group didn’t want it 
to be used often.” D 


Berners-Lee: Standards Groups Are ‘Very Different Places’ 


Tim Berners-Lee, director of 
the W3C, spoke with Computer- 
world this month about recent 
moves by technology 

vendors to submit Web 

services standards pro- 

posals to OASIS instead 

of his organization. 


What are your thoughts about 
that trend? OASIS and the 
WSC are very different places 
altogether. The rules are very 
different. [At the WSC, ] a lot 
of that has to do with getting 
everybody on board, making 
sure everything is coordinated 
and trying to get the standard 
very widely deployed. [We re- 
quire] a demonstration of imple- 
mentation, of interoperability, 
before something can become a 
standard. We have public re- 
view. We have requirements 
that the groups be chartered to 
liaise with groups which have 
related technology. 

What OASIS provides is 
somewhere you can start an ac- 


tivity with no prior requirements. 
Three companies can just get to- 
gether, they can start a group, 
and there's nothing to 
prevent the same thing 
[from] being done in dif- 
ferent organizations. 
There's nearly no man- 
agement control at all. It's faster. 


Do you think it’s a dangerous 
trend? For core standards for 

a big new market area, | think 

it's very important that they 

are widely accepted by every- 
body. .. . For an application-level 
specification or for something 
like a programming language, 
you can have three, four, five, 
eight of those around and mix 
them together to a certain ex- 
tent. So in some areas, it doesn’t 
hurt. But for the foundational 
specs of the Web services archi- 
tecture, | feel that it's important 
te have the W3C. 


Do you have concerns about 
what’s happening with the 


BPEL specification within 
OASIS and the W3C’s similar 
standards efforts on choreo- 
graphing Web services? | do 
have concerns about that. | feel 
that's an area where it's not ob- 
vious how things are going to 
work out for the best, because 
there’s no mechanism for W3C 
and OASIS to coordinate. 


Some vendors say that the 
WSC is concentrating too 
much on the Semantic Web 
initiative and not enough 

on Web services. Do you 
think that’s a misguided 
impression? Obviously, there 
are some members for whom 
Web services are absolutely 

the thing. We try to keep it 
balanced. There are other peo- 
ple who tell us, “Why are you 
wasting your time on all this 
Web services garbage? If [com- 
panies] would just use the Se- 
mantic Web, it would all happen 


> $0 easily.” 


- Carol Sliwa 





You trust the rivets to hold the 
44,000-ton steel skeleton together. 


You trust the skeleton to support 
three miles of braided cable. 


You trust the cable to keep you 
suspended in mid-air. 


Shouldn’t you feel the same 
way about the security of 
your network infrastructure? 
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Ameritrade 


City, N.J.-based Datek Online 
Holdings Corp. There weren't 
many. So Hirji said it came 
down to choosing the best of 
each company’s 
staff and technolo- 
gy — and getting 
rid of the rest. 
The biggest technology 
challenge to date, he said, was 
consolidating three data cen- 
ters into two, and two back- 
end systems into one. 
Previously, Datek used Win- 
dows NT servers that ran 
homegrown middleware plus 
Linux servers from IBM, 
whereas Ameritrade used Sun 
Microsystems Inc. Unix 
servers and BEA Systems 
Inc.’s Tuxedo middleware 
(QuickLink 34203]. Ameri- 
trade wouldn’t say how many 
servers, disk arrays and net- 
work devices were culled as 
part of the consolidation ef- 
fort, nor would it specify 
which systems are still in use. 
But Hirji said the project in- 
cluded detaching the front 


Fizzer Worm Sparks Concern 


; Ameritrade’s back-end tech- 





end of Datek’s trading system 
and then connecting it to 
Ameritrade’s back-end system. 
“We did that over a weekend 
in March, and we did that 


without impairing any existing | 


accounts, any of the balances, 
any of the trades,” he said. 

Now, both the 
Ameritrade and 
Datek online trad- 
ing sites run on 


nology. The only thing left to 
do is merge the two front ends 


| into a single Web site. That’s 


expected to be done by Sep- 
tember, Hirji said. 

Ameritrade has shut down 
its data center in Omaha and 
combined operations into two 
others: its main IT facility in 
Kansas City, Mo., and Datek’s 


data center in Secaucus, NJ. 


On Track 

Paul Cantwell, a financial ser- 
vices consultant at Accenture 
Ltd., said the Ameritrade/ 
Datek integration effort is 
above average because it’s 
ahead of schedule. Most merg- 
er-related integration projects 
drift on without end because 





NEWS 


of loose management and un- 


| realistic expectations, he said. 


Hirji said it was a challenge 
dealing with two rival IT 
teams, each of which thought 
its homegrown software was 
better than the other’s. He 
added that he overcame the 
internal battles by quickly es- 
tablishing a clear, objective 
methodology for choosing 
technology. “We made sure 
that the broad organization 
had input and buy-in into that 
process,” he said. 

Hirji said his job now is to 
build a single company that’s 
more efficient and profitable 
than the two former compa- 
nies were — in the midst of a 
dreadful economy. Fortunate- 
ly, he said, Ameritrade’s focus 
on online trading gives it a 
lower IT cost structure than 
brokerages that diversify into 
businesses like banking, mort- 
gages and insurance. 

“So if it sucks for everyone 
else right now, it sucks less for 
us,” Hirji said. “The converse 
is also true. When it gets bet- 
ter for everyone else, it gets 
even better for us, given our 
cost margin.” D 


About Remote Security Risks 


Damage to corporate networks is minor, 
but remote users aren't fully protected 





BY JAIKUMAR VIJAYAN 
Last week’s Fizzer worm ap- 
pears to have had little impact 
on corporate networks, ac- 
cording to IT managers and 
analysts. But the malicious 
code and spyware that such 
viruses leave behind on un- 
protected systems 
could prove to be 
a long-term 
headache for com- 
panies, they said. 
Fizzer repre- 
sents an emerging 
class of worms 
that try to circum- 
vent increasingly 
sophisticated cor- 
porate defenses in 


USETS. 
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DAVID KRAUTHAMER, 
DIRECTOR OF IS, ADVANCED 
FIBRE COMMUNICATIONS INC. 


a variety of ways. The worm 
was contained in executable 
attachments embedded in 
e-mail messages with innocu- 
ous-sounding subject headers. 
In general, companies that 
keep their antivirus software 


| up to date and have policies for 


I think the 

biggest 
security threat 
today is remote 


filtering exe- 
cutable attach- 
ments would have 
been protected 
against Fizzer, 
said Russ Cooper, 
an analyst at 
TruSecure Corp. 
in Reston, Va. 
Pete Lind- 
strom, an analyst 
at Spire Security 





LLC in Malvern, Pa., said IT 
and security managers who 
haven't yet taken such basic 
defense measures are simply 
being “derelict in their duty.” 
But workers who dial into 
corporate networks from their 
homes and other remote loca- 
tions may not have full-blown 
defenses available to them and 
are therefore more vulnerable 
to having their PCs infected 
by such viruses, said Michael 
Allgeier, data security officer 
at the Lower Colorado River 
Authority in Austin, Texas. 
That could prove dangerous 
because of the payload carried 
by worms like Fizzer. Accord- 
ing to F-Secure Corp., a Hel- 
sinki, Finland-based antivirus 
software vendor, Fizzer con- 
tains a built-in Internet Relay 
Chat back door, a denial-of- 
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CIO Gives Notice of Layoffs 


When Ameritrade brought him in 
as a consultant last September 
to consolidate its IT systems and 
staff after the Datek acquisition, 
Asiff Hirji decided it would be 
better to take his time and care- 
fully choose the best talent, in- 
stead of, as he put it, 
“firing 90% and 
you're done.” 

“Some CIOs will tell 
you technology is a 
competitive advan- 
tage,” said Hirji, who 
now is ClO. “I don't 
believe in that at all. | 
think technology by 
and large is a com- 
modity. The only dif- 
ferentiating factor, the 
only thing you can build sustain- 
able competitive advantage 
around, is people.” 

Every working moment that 
he’s not actively involved in a 
project, Hirji is thinking about 
how to attract, retain and devel- 
op the best IT talent, he said. 

But Hirji is making deep cuts 


Facts About 
Fizzer 
w The worm spreads via 


e-mail and the Kazaa P2P 
file-sharing network. 
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@ It contains a back door, 
a denial-of-service tool and 
a keystroke-logging Trojan. 
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@ It generates e-mail 
subject headers that are 
completely random. 


service attack tool, a keystroke- 
logging Trojan, an HTTP serv- 
er and other components. 

Such capabilities could allow 
hackers to remotely control 
compromised machines and 
steal data from them or mine 
them for passwords, analysts 
said. And connecting a com- 
promised system to a corpo- 
rate network might let hackers 
burrow past other defenses. 

“T think the biggest security 
threat today is remote users,” 
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because of the merger. Most of 
the 250 workers being let go 
were laid off late last year, but a 
significant number will stay until 
September. They also were told in 
December that they would be cut, 
which Hirji said was the “honor- 
able thing” to do. 

Hirji acknowledged 
that providing advance 
notice of the planned 
layoffs increases the 
chance that disgrun- 
tled employees could 
take revenge. But he 
said some laid-off 
workers will strike 
back at the company 
no matter what, and 
the rest are more likely 
not to retaliate if he’s open about 
the layoffs and treats them fairly. 

Just in case, though, Hirji has 
put additional safeguards in 
place, such as monitoring tools 
and restricted access to sys- 
tems, for the employees who are 
being let go in September. 

~ Lucas Mearian 


said David Krauthamer, direc- 
tor of information systems at 
Advanced Fibre Communica- 
tions Inc. in Petaluma, Calif. 
“Tt’s becoming easier to gain 
an access foothold to a corpo- 
rate network.” 

“We don’t have any control 
over remote workstations or 
home PCs or kiosks or wher- 
ever it is that people access 
our networks from,” Allgeier 
said. “We can’t really rely on 
personal firewalls and anti- 
virus software to detect Tro- 
jans and keystroke-loggers.” 

The Lower Colorado River 
Authority has begun to roll 
out software developed by 
Austin-based WholeSecurity 
Inc. that scans individual 
desktop PCs for malicious 
code. Allgeier said it’s looking 
to deploy the tool for remote 
users as well. D 


Go to our Security Knowledge Center for 
additional iriformation and resources: 


QuickLink k1600 
www.computerworld.com 





—— 26pm a = 
< Heeauye oF cet just happened in 


SMARTER DATA ES DOES WHAT SOFTWARE ALONE CAN'T: Wherever viruses ac Tol 2 Trend Micro 
is near at hand with a global force of content security experts backed by the only integrated Pryerer tas ; 
a Pelee the entire attack lifecycle. Loo 157 Trend Micro” Enterprise : Protection Strategy Pres : 
attack-specific products including everything from Outbreak Prevention policies to Damage rere 
templates—all delivered while the attack oe) so you can better manage the threat and aN ere re costs. 

To find out how Trend Micro's best-of-breed products and services backed by the vigilance of BSS CULE 


engineers can help you manage every stage of a virus outbreak, visit PTAA retetent rte nth deere tayo 





16 cowpurenworto tay 1, 2003 


Vendors Need to Find New Ways 
To Work With Users, Zander Says 


Former Sun exec 
remains ‘bullish’ 
about IT industry 


BY MARYFRAN JOHNSON 

Ed Zander, former president and 
chief operating officer at Sun 
Microsystems Inc., last week 
said he will become a manag- 
ing director at Silver Lake Part- 
ners, a Menlo Park, Calif.- 
based investment firm. Earlier 
this month, Zander spoke with 
Computerworld about the IT 
industry and his time at Sun, 
which he left last July. 


How can technology vendors dig 
themselves out of the mess 
they’re in now? We as an indus- 





try have to demonstrate to IT 

professionals and CIOs what 

we're going to do for them to 

reduce their IT costs. There’s 

a significant backlog of appli- 

cations, but budgets are frozen 

or reduced, and people are 

stuck with an IT infrastruc- 

ture that’s way too expensive. 
When you get back to the 

business side of the 

house, they’re all tired 

of hearing about all 

this technology. The 

company that gives 

them an IT advantage 

to design cars more 

quickly or reduce sup- 

ply chain costs, that’s 

what matters. They’re 

not interested in hear- 


ing about 48-way servers. 


What was really behind your deci- 
sion to leave Sun? With the 
No. 2 position, you do those 
jobs for three or four years, 
and then you either get the 
CEO job — like Sanjay Kumar 
at CA — or you exit. Some- 
times on good terms, some- 
times not. With me, it 
was friendly. Scott 
[McNealy] wants to 
run the company for 
another 10 years. But if 
you do the president’s 
job, eventually you 
want to make the CEO 
decisions. You’re so 
close to that office, and 
you're running the 





company from day to day, but 
the CEO still gets to make the 
big strategy calls. 


What do you think were the best 
decisions you made at Sun? One 
of my best was branding So- 
laris, which was very contro- 
versial inside Sun at the time. 
That was a first in the main- 
stream computer market, tak- 
ing an OS and making it a 
brand. It basically made So- 
laris what it is today. Another 
great decision was around the 
whole Internet and dot-com 
era, seizing that opportunity 
and driving the company 
around it. We were the “dot” 
in “dot-com,” and any new 
start-up was using Sun. 


What were your worst decisions? 
In 1992, we introduced a ver- 
sion of Solaris that was not 
ready for prime time. I rushed 
it to market too soon, and that 





www.computerworld.com 


was a disaster. More recently, I 
think we didn’t push enough 
on the whole Linux question. 
We should have done more to 
understand how to embrace it 
within [Sun’s] strategy, to 
“own” that whole developer 
community. The third thing 
was not moving to [downsize] 
the company properly once 
the market started coming 
apart in the fall of 2000. 


What do you think the next big 
thing in IT will be? There’s no 
big “next thing” on the hori- 
zon. There’s nothing like the 
Net or PCs coming in the near 
future. It’s going to be more 
about rationalization, consoli- 
dation and making sense of 
what people already have. But 
my long-term outlook is still 
very bullish. People say the in- 
dustry is maturing, but I tend 
to argue that it’s not, because 
innovation is still happening. D 








Continued from page 1 


i2 Concerns | 


mission is investigating its ac- 
counting practices. 

Blake Kresl, manager of 
technology at Southwest Air- 
lines Co. in Dallas, said busi- 
ness executives at the airline 
have taken note of the unan- 
swered questions about i2’s fi- 
nances. Because i2 and South- 
west are based in the same 
city, the vendor is “constantly 
in the morning news,” he said. 
“So whenever a story hits, 
we're asked about what’s go- 
ing on. Obviously, being so 
public, it’s a concern.” 

But, Kresl added, he remains 
confident that, “in one form or 
another, the applications we 
want will keep going.” 

“Certainly, there is a con- 
cern about the delisting and 
the financial problems,” said 
George McAfee, supply chain 
project manager at Cooper 
Tire & Rubber Co., a Findlay, 
Ohio-based manufacturer that 
runs i2’s production schedul- 
ing and transportation man- 
agement software. “We’ve put 
a lot of money on the line and 
have high expectations from 
{our senior] executives.” 

But McAfee said i2’s prob- 





lems won't stop him from buy- | 
ing more of the company’s 
software. And like other users 
at the conference, he said he 
has seen a positive change in 
the way i2 operates since it 
overhauled its senior manage- 
ment in April 2002. 

Before the reorganization, 
McAfee said, i2’s leadership 
was “more focused on grow- 
ing the business at all costs 
and trying to sell the software 
to everyone in the world, in- 
stead of nurturing the existing 
client base. I think the mission 
was very shallow, and that’s 
why it failed.” 

Kresl also said i2’s attitude 
toward users has improved. 
“There was a little bit of hu- 
bris [before],” he said, adding 
that i2 is easier to work with 
now and is more willing to 
acknowledge and address 
shortcomings or bugs in its 
applications. 

“They’re not looking at sell- 
ing back into the company, but 
at making a success out of 
what they’ve already sold us,” 
Kresl said. Southwest uses i2’s 
parts management and de- 
mand-planning software. 

“The last year has been a 
challenge for i2,” said Janet 
Eden-Harris, i2’s chief market- 





ing officer, during a speech. 


“But it’s a stronger company 
than it has been for the last 
several years,” she added, re- 
ferring to the management 
changes as well as downsizing 
moves, new product rollouts 
and improving customer-satis- 
faction rates on i2’s surveys. 
Even so, the combination of 
the SEC investigation, the re- 
audit and the stock delisting 
continues to weigh on i2. 
Some users said the reaudit 
process, which is due to be 
completed next month and is 





expected to lead to a restate- 
ment of i2’s financial results 
for several years, will be a key 
milestone for the vendor. 

“We watch our critical trust- 
ed suppliers very carefully, 
and at present, this is not sat- 
isfactory for anyone,” said Jeff 
Poole, senior vice president of 
procurement strategy at Air- 
bus SAS, a Toulouse, France- 
based aircraft maker. “We'll 
wait and see what happens 
when the [reaudit] report is is- 
sued — not that anyone is par- 
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ticularly expecting any diffi- 
culties around that.” 

J.B. Hoyt, supply chain 
project director at Whirlpool 
Corp. in Benton Harbor, 
Mich., said via e-mail that 
i2’s management has said the 
reaudit should have a “benign’ 
affect on the vendor. If the 
conclusion of the process “is 
negative, then we will all 
have to assess the outcome at 
that time,” said Hoyt, who 
didn’t attend last week’s con- 
ference. D 
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Ariba Upgrades Corporate Spending Apps | 


BY MATT HAMBLEN 

Ariba Inc. last week unveiled 
upgrades to eight of its spend- 
ing management applications, 
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with a focus on helping com- 

panies better monitor expens- 

es for corporate services rang- 
| ing from snow removal to le- 


gal help, marketing and IT 
consulting. 
The new releases were an- 
| nounced at Ariba’s user con- 


ference in Hollywood, Fia., 
and are all due to be available 
next month. 

Martin Boyd, director of 
marketing at Ariba, said the 
Sunnyvale, Calif.-based com- 
pany is adding functionality 
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designed to support services 
that typically account for one- 
third to one-half of all expen- 
ditures within companies. 

The upgraded software can 
manage spending in a total of 
16 categories, including travel, 
utilities, insurance and health 
benefits, Boyd said. It can also 
be used to track staffing costs, 
such as expenses for tempo- 
rary workers and the use of re- 
cruiters, he added. 

Earlier this month, con- 
sumer electronics retailer Best 
Buy Co. announced that it’s 
expanding a deployment of 
Ariba’s products and said it 
wants to use the software to 
automate more of the process 
of managing contract-driven 
corporate services. 

A Best Buy spokeswoman 
said the Eden Prairie, Minn.- 
based retailer has been an Ari- 
ba customer since late 2000. 
About 80,000 Best Buy em- 
ployees use the vendor’s pur- 
chasing and travel expense 
management tools. As part of 
the expansion plan, Best Buy 
is adding Ariba’s contracting 
and invoicing applications. 

The retailer has already 
gained efficiencies in procur- 


ing some services, like snow 


removal, the spokeswoman 


said. Contractors can send 


electronic invoices to Best 
Buy, allowing for automatic 
reconciliation and settlement 


| of payments, she added. 


Ariba’s rollout includes up- 


| grades of its purchasing, con- 


tracting and invoicing applica- 
tions, plus revised versions of 
its sourcing and spending 
analysis products. 

“The ‘wow factor’ is that 
Ariba is putting more func- 
tionality around services,” 
said Christa Degnan, an ana- 
lyst at Aberdeen Group Inc. 
in Boston. “If a company has 
done any e-procurement, this 
is the next level.” 

The services components 
are “relatively unique” to Ari- 
ba, Degnan said, citing People- 
Soft Inc. in Pleasanton, Calif., 
as its closest competitor. 
Smaller companies that spe- 
cialize in spending manage- 
ment software include Elance 
Inc. in Sunnyvale, Calif., Field- 
glass Inc. in Chicago, and IQ- 
Navigator Inc. in Denver. D 
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MARYFRAN JOHNSON 


Credibility Challenged 


HERE WAS A TIME in the late 1990s when 
the common workplace refrain was, “Are 
we having fun yet?” I don’t quite re- 
member the dot-com context (there’s so 
much of that period I’ve blotted out), but 
the gist of it was about wondering when all the in- 
sanely long hours and maniacal workaholism were 
going to pay off. For the most part, they never did. 


Today the question 
(no longer even remote- 
ly amusing) would prob- 
ably be: “Are we credible 
yet?” On a personal lev- 
el, most IT executives 
and managers would 
probably answer in the 
affirmative. When we 
surveyed 144 senior IT 
managers at Computer- 
world’s Premier 100 IT 
Leaders Conference a 
few months ago, only 
20% of them said they thought IT 
had image problems “in my compa- 
ny.” But 45% identified a lack of 
credibility for IT “in general.” 
Those image problems stem from 
well-known complaints about IT de- 
partments being too slow, too ex- 
pensive and too geeky to communi- 
cate the business value of what 
they’re doing. So, on a profession- 
wide basis, IT is lugging around a 
lot of baggage, as our Cover Story 
last week pointed out in detail [“Tar- 
nished Image,” QuickLink 38043]. 
There’s a lingering resentment at 
many companies about technology 
dollars gone down the drain. The 
evidence includes chronic IT budget 
overruns, fizzled projects, over- 
priced Y2k fixes, deflated dot-com 
dreams (remember B2B exchanges?) 
and the billions spent on complex 
enterprise software installations that 
didn’t quite live up to their billing — 
and probably never will. All of 
which puts your IT operation at 
greater risk of an unwelcome visit 
from the outsourcers. 
Unfortunately, things have gotten 
worse in the past few years. The 





Hackett Group can prove 
it with performance 
benchmarks from some 
2,000 of the nation’s top 
companies. At average- 
performing companies, 
the IT project completion 
rate was 67% last year — 
down from 72% in 1999, 
Even worse, completion 
of short-term projects 
(those that are supposed 
to take less than a year) 
slipped from 58% in ’99 to 
51% last year. 

What hurts about statistics like 
these is the way they paint the 
whole profession with the same 
sticky brush. That’s unfair to compa- 
nies like Hilton Hotels, where Cor- 
porate Systems Vice President 
Damien Bean can prove how IT is 
run like a business with a bottom- 
line focus. “The entire IT budget — 





every last cent — is funded out of 
the business side, and we charge 
back. We absolutely hit our bud- 
gets,” he says, adding that “I don’t 
think IT executives are suffering a 
credibility gap more than any other 
senior function.” 

Maybe so. But since the budget 
money for those future IT projects 


| remains firmly in the hands of the 


CFOs and CEOs, any argument over 
who’s lost more credibility is likely 
to end in a Pyrrhic victory. 

There are winning strategies in 
this image makeover challenge, 
however. 

At the companies where IT has 
turned its reputation back into gold, 
the three best practices have been to 
involve the business units more in 
planning and decision-making, pri- 
oritize projects more effectively and 
boost communication with the CEO 
and other senior executives. Sounds 
rather common-sensical and famil- 
iar, doesn’t it? At other places, IT 
groups are creating marketing pro- 
grams to call attention to their ser- 
vices. They’re surveying internal 
and external customers for feedback 
and suggestions. And they’re keep- 
ing it real with users by managing 
expectations and being honest about 
project delays. 

So, are you credible yet? D 
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PIMM FOX 


The Art 
Of ERP 
Done Right 


RYING TO JUSTIFY 

spending 1% to 3% of 

your company’s annual 
revenue on ERP software is 


always going to be more art 
than science. This is mainly because 
the reasons for moving ahead with an 
ERP project have included the essen- 
tial but difficult-to-quantify replace- 
ment of legacy systems along with the 
equally slippery goal of improving 
productivity and system reliability. 

But when the CFO tells you to gauge 
the effect of ERP, you’ve got to come 
up with coherent metrics that are less 
artful and more concrete. 

A new study by Meta Group might 
help. Meta says each 
company must in- 
clude in its metrics 
its unique business, 
geographic and envi- 
ronmental context. 

As such, corporate 

location and revenue, 

the size of the user 

population and the 

actual ERP process 

must become part of 

your cost analysis. 

The report conclud- 

ed that “total-cost-of-ownership met- 
rics can be misleading when they are 
based on industrywide averages.” 

After surveying the work of six lead- 
ing ERP vendors — J.D. Edwards, Law- 
son, Oracle, PeopleSoft, QAD and SAP 
— for 200 user companies in 12 indus- 
tries, the results showed that ERP in- 
vestments were made over three to 
five years. On average, 25% of the cost 
was spent on software, 40% on profes- 
sional services and 25% on internal 
staff. Implementation time for these 
projects was approximately 20 months. 
Another seven months were needed 
before the benefits showed up. Calcu- 
lating your TCO shouldn’t stop when 
the project goes live. Also, include the 
first two years of operation. 

Of course, part of your analysis 
needs to incorporate the structural 
changes you made to accommodate 
the ERP project. Indeed, the Meta re- 
port found that although smaller com- 
panies spend more as a percentage of 
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» No voice mail, or automated phone trees, just the answers you need when you 
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You can! When you call for information or to place an order on any 


items in the Softchoice Browser, just reference the product code 
(eg. CAT9001) afd you’ll be entered into the draw. It’s that easy. 


For quotes, orders and your chance to win 


call 1.877.967.3737 or visit www.softchoice.com 
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RealSecure® Protection System 
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INTERNET 
SECURITY 
SYSTEMS 


INTERNET 
SECURITY 
SYSTEMS 
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INTERNET 
SECURITY 
SYSTEMS 


Ve rN 
( CODE # CAT9001 ) 


Advanced protection for large and mid-size enterprises. New threats can blow through firewall or antivirus 


software. That's why Internet Security Systems delivers an advanced protection platform that safeguards 


networks, servers, and desktops from even the most sophisticated attacks. 


Intrusion Protection Products: 


Fast, 


keeps out the attackers, worms and complex threats 


accurate, powerful intrusion protection that 


that firewalls and antivirus cannot detect. 


© RealSecure® Network Sensor - Protection for fully utilized 
10Mbps, 100Mbps half and full duplex networks. 

¢ RealSecure® Gigabit Network Sensor - Protection for 
high-speed 1 Gbps networks. 

¢ RealSecure® Desktop Protector - Protection for fixed, 
remote and mobile PCs or desktops. 

¢ ReaiSecure® Server Sensor - Protection for all critical 


enterprise servers. 


Audit and Assessment Products: 


A unique suite of tools that allow you to easily identify 
and patch critical vulnerabilities at every layer of your 


network. 


e Internet Scanner® - Vulnerability detection for networks. 

e System Scanner™ - Vulnerability detections for servers. 

¢ Database Scanner® - Vulnerability detection for 
leading database applications, such as Microsoft 
SQL, Oracle, and Sybase. 

e Wireless Scanner™ - Vulnerability detection for networks 
utilizing 802.1 1b WLAN (Wi-Fi) access points and clients. 


Dynamic Threat Protection™. Internet Security Systems' intrusion protection and audit/assessment products 


work seamlessly together under a common management console, RealSecure® SiteProtector™, to allow real-time, 


automatic correlation of vulnerability data and identified intrusions. This quick analysis capability saves time and 


money by prioritizing security events and focusing resources on the most critical vulnerabilities and attacks. 
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Connected to 
the Internet? 


CODE # CAT9002) 


Connect securely with McAfee Security. 


With losses of over $13.2 billion dollars last year, businesses can't afford to leave their networks 
unprotected. Since 87% of security breaches enter through email, the best defense is to block those virus 


threats right at the Internet gateway - never letting them enter in the first place. 


McAfee® Security's WebShield® e250, WehShield® e500 and WebShield® e1000 appliances are the most 
competitively priced gateway defense solutions available - perfect for businesses with limited budgets. 
Combining award-winning antivirus and content management software with enhanced hardware, 
WebShield appliances provide industrial-strength security that's easy to install, use and manage. With a 


single appliance, businesses of every size have a cost-effective way to manage data. 


The WebShield e250 is designed for the needs of smal! to mid-sized businesses, while the robust 
WebShield e500 is suitable for even the largest company. The WebShield® e1000 is perfect for the 
enterprise as it offers approximately twice the performance of an e500, and the ability to support a greater 
number of concurrent users. Bottom-line: McAfee Security provides effective email scanning at the best 
price available. 

£19218 MCAFE SHIELD E250 APPLIANCE $2,403.00 


B36652 MCAFEE WEBSHIELD E50¢ IANCE wes ..$10,786.00 
E11920 MCAFEE WV D £1000 APPLIANCE $17,300.00 





Xbox. Just reference the product code when you call. 


Void where prohibited. US and Canadian Federal and Prov Gov ment Agencies ex uded from yntest 


Enter to win a Microsoft 





wo 


softchoice |i. 


Office” 


Professional 


= 
= 


apy Microsoft xp Microsoft’ é & Microsoft’ 
* 54 a 
ia Windows” = FAO Fficex? Fl Visio 


Find out how you can move your company forward with the most reliable and secure Microsoft® desktop. 
By upgrading to Microsoft Windows® XP Professional, Office XP Professional, and Visio® 2002, you can take a 
proactive step toward making your organization more productive and dependable. These applications help 
defend against threats such as security breaches and computer viruses, reducing distractions and keeping 
downtime to a minimum. The Microsoft desktop provides you with a competitive edge, peace of mind, and the 


freedom to focus on customer needs. 
The Microsoft desktop delivers a solid foundation that will enable your business to: 


e Maintain Momentum: Windows XP Professional is at least 10 times more reliable and starts up 27 percent 


faster than Windows 98 SE 


e Help Protect Data Integrity: In Windows XP Professional Encrypted File System, entire folders and files can 


be easily encrypted, whether you're working on a network, over the Internet, or offline 


Microsoft Windows XP Professional, Office XP Professional and Visio 2002 are easy to deploy, manage, and 


use, enabling better business processes with lower maintenance costs and improved productivity. 


rea 


993131 MICROSOFT WINDOWS XP PROFESSIONAL EDITION CD RO fd ae 

993133 MICROSOFT WINDOWS XP PROFESSIONAL EDITION UPGRAD . " aes a 
939401 MIC )FT OFFICE XP PROFESSIC 0 — F eer 
939441 MICROSOFT VISIO 2002 STANDARD EDITION C $201.00 ee 


There are additional licensing programs available that may provide a deeper discount. Call now to find out more! 


3 Microsoft Corporation. All rights reserved. Microsoft, Visio and Windows are either registered trademarks or trademarks of Microsoft Corporation ir 


r respective owners 
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eTrust Antivirus 


eTrust™ Antivirus provides enterprise-class protection against virtually all 
forms of costly virus attacks - from the PDA to the gateway. It reduces virus 
infections, simplifies and automates updating, eases administration, “locks 
down" security policies at the desktop, provides FREE signature updates, 


and identifies and isolates malicious code before it enters your network. 


pc) Be) 


Additionally, its dual virus-scanning engines deliver double the protection for 

the price of one. Certified by ICSA Labs for detecting and curing 100% of 

oo et “in-the-wild" viruses and backed by eTrust™ TARGET (Threat and Analysis 

al Response Global Emergency Team), eTrust Antivirus is the perfect choice for 


complete virus protection. 


‘CODE # CATS004 


Computer Associates* E21967 ETRUST ANTIVIRUS 05 USER WITH 1YR MAINTENANCE $120.00 


WebTrends Firewall Suite 


WebTrends Firewall Suite from NetlQ@ provides in-depth analysis of incoming and 
outgoing activity through a company's firewall, VPN or proxy server. This product 
enables network and firewall administrators to move beyond reactive operations 
management to proactive network management, eliminating issues and risks before 


they arise. 
WebTrends Log Analyzer Series 


WebTrends Log Analyzer Series from Neti@ offers small businesses with a single 
server or growing businesses with multi-server web sites fast and easy to use web 
traffic reporting. The most robust entry-level, multi-platform reporting tool 
available, WebTrends provides path analysis, search engine analysis, geographic 


data and support for all standard log file formats. 


ay 
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y 


D42872 WEBTRENDS FIREWALL SUITE LIC 01 FIREWALL TIER 1 . Qnetih 


£44285 WEBTRENDS LOG ANALYZER CD R¢ Work Smarter, 


Enter to win a Microsoft Xbox. Just reference the product code when you call. 
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Help Protect 
Your Business 
on the Net 
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Microsoft® Internet Security & Acceleration (ISA) Server 2000 integrates an extensible, multi-layer, 
enterprise-class firewall optimized for application-layer filtering and with a robust, high-performance 
Web cache. 


ISA Server can be added to any network to: 





¢ Deliver enhanced security beyond that of traditional firewalls through application-layer filtering, 
which helps safeguard your network from hackers and malicious worms 


e Provide remote access and site-to-site virtual private networking (VPN) functionality 


¢ Integrate security with a high performance caching and Internet access control solution that is 
easy to deploy and manage 


e Increase the security of Exchange Server and Internet Information Services (IIS) deployments 
using Feature Pack 1 


Building on Microsoft Windows® 2000 Server security and directory features, ISA Server runs on a 
Server 2003 or Windows 2000 Server or Windows Advanced Server; however, it can also be run in 
a Windows 2000-only domain, Microsoft Windows NT® Server domain, mixed Windows Server 
domain, or heterogeneous OS environment. 


ISA Server is certified by the International Computer Security Association (ICSA), and is available 
in Standard Edition or Enterprise Edition. Both have the same rich feature set, but while Standard 
Edition is a stand-alone server supporting a maximum of four processors, ISA Server Enterprise 
Edition is appropriate for large-scale deployments, server array support, multi-level policy, and 
computer systems with more than four processors. 


For more information on how you can achieve stable, fast, and manageable Internet connectivity ‘ 
with the Microsoft® ISA Server, contact your Softchoice representative. ’ 
‘ 
Boeees MICROSOFT ISA 2000 SERVER 1: PROCESSOR CDROM isseis ccasscsssessssoveisasvsnssnsntousossseucccedvussudvecdavsveaseentennee $1,471.00 
924486 MICROSOFT ISA 2000 SERVER ENTERPRISE EDITION 1 PROCESSOR CD ROM wssssssssssssessssscsenscerssscsssersceseesers $5,920.00 
© 2003 Microsoft Corporation. All rights reserved. Microsoft, Windows, and Windows NT are either registered trademarks or trademarks of Microsoft Corporation in 
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Microsoft’s 


Most Reliable, 


Manageable, Scalable 
Server Platform 
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Windows Server 2003 






























Microsoft® Windows® Server 2003 offers a reliable, affordable application server operating system 
for connecting businesses with employees, partners, and customers. Featuring advanced security 
technology, increased performance, and improved reliability, Windows Server 2003 is the most 
productive and versatile Microsoft platform for powering applications, networks, and Web services. 


Microsoft® Windows® Server 2003 helps organizations react to business volatility with advanced 
flexibility and scalability. It includes: 


e File sharing to help improve workers’ productivity 
e Internet-ready capabilities to make the most of online opportunities 
e Improved security technology and data recovery to increase your company's stability 


e Easy-to-use centralized administration tools that allow you to attend to other mission-critical 
activities and increase productivity 


Let this multi-purpose network operating system help grow and adapt your business, 
increase customer satisfaction, and reduce costs. To find out which licensing plan best fits 
your organization, call your Softchoice representative. 





On Fe 
E30050 MICROSOFT WINDOWS 2003 SERVER STANDARD ED 005 CLIENT CD ROM ...... $1,017.00 ‘CODE # cAT9006 
E30027 MICROSOFT WINDOWS 2003 SERVER ENTERPRISE 025 CLIENT CD ROM .sscosssesseesssenees $3,905.00 \ a 
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There are additional licensing programs available that may provide a deeper discount. 
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NetworksA-OK 


www.interioci.com 


‘CODE # CAT9007> 


NetworksAOK 

Network Security plus much more! 

Five solutions in one easy-to-implement appliance: 

eAn intrusion detection system practical for 
those unskilled, as well as skilled, in security 

e A comprehensive network management system for 
monitoring devices and applications 

e A trouble ticketing system integrated with automatic 
alerts for security and/or network problems 

e A multiple-network monitoring capability for service 
providers and large enterprises 

All integrated and pre-installed on a rack-mount 

server that's easy to use...at a price any one of these 

5 functions sell for — a terrific value! 


D86494 iNTERLOCI NETWORKSAOK APPLIANCE...$3,237.00 


Arc 


Legendary Reliability 


(CODE # CAT9008) 


APC Smart-UPS 
Performance power protection for servers and networks. 


© AVR Boost and AVR Trim automatic voltage regulation 

e FREE PowerChute software for advanced power 
management 

e Optional SmartSlot accessories customize functionality 

¢ Network-grade surge suppression and lightning protection 


€56852 APC SMART 1500VA 1 $530.00 
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Persona® 5.0 by Esker is the only terminal emulation 
product to earn Common Criteria security 
certification - a globally recognized standard for IT 
products. Persona's high-level security features 
include SSL, SSH, DES, and Triple DES encryption 
to safeguard sensitive data. 


E40288 PERSONA 10 USER SVR 1 YR MAINT/CD ROM....$1,826.00 


Suber? (CODE # CAT9005) 


eo 
OQ Tl The Authority in Secure 
Messaging & Collaboration 


Software, Inc 
Sybari's Antigen for Microsoft Exchange 


Sybari's Antigen for Exchange delivers a preemptive line 
of defense from e-mail viruses, worms and malicious 
code, and is the only server-level antivirus solution 
that delivers advanced file and content filtering 
capabilities, and multiple scan engine technologies 
for both Microsoft Exchange 5.5 and 2000 in a single 
solution. Antigen provides the highly specialized 
features Exchange administrators need to protect their 
mission critical messaging environments. 


£48323 ANTIGEN FOR MS EXCHANGE LIC 10-24 CD ROM.... $35.00 














Adobe Acrobat 6.0 Professional 


The Adobe Acrobat 6.0 family extends the value of the Microsoft 
Adobe 
AdOoDe Office investment in the enterprise, ensuring reliable and secure 


Acrobat 6.0 nee business document exchange and review. Using the Adobe 


Professional Portable Document Format (PDF), documents may be securely 


exchanged, and commented upon while preserving the integrity 
of the source document. 128-bit encryption enables document 
authors to grant permissions which control access to reading, 


printing and editing Adobe PDF documents. 


Furthermore, the Acrobat 6.0 family uses digital signatures to 
approve and authenticate documents, circumventing the issue 
of document tampering after approval. An intuitive user 
interface provides authors and recipients alike with easy access 


to the Acrobat 6.0 security features. 


¢ The Adobe® Acrobat® family allows business and creative professionals to streamline their document 
processes by enabiing the reliable and efficient exchange of business-critical documents in Adobe Portable 
Document Format (PDF) 


¢ Adobe Acrobat Elements software, available only through licensing with a 1,000-seat minimum order, offers 
basic Adobe PDF file creation from Microsoft Office 


© Acrobat 6.0 Standard software converts any paper or electronic document to an Adobe PDF file and offers 
intuitive review management tools 

© Adobe Acrobat 6.0 Professional software offers all of the benefits of Acrobat Standard plus forms creation 
and tools that enable advanced control over the exchange and output of graphically complex documents 


Adobe Systems Incorporated is a demonstrated leader in providing solutions for secure and reliable 
electronic document exchange. In addition to providing confidentiality through encryption, Adobe 
has embraced digital signatures since Acrobat 4.0 in 1999 to provide authenticity and integrity to 


electronic documents. 


This provides recipients with added assurances that their documents really did originate from the named 
source and have not been maliciously or inadvertently tampered with since authoring. While providing 
these security features for years, Adobe has also maintained an intuitive user interface for authors and 


recipients to easily utilize document security. 


CODE # CAT9O11 4 


Adobe 
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Does your tape backup solution leave you frustrated because it is slow 
or doesn't include all the files needed for a reliable restoration? 


PowerQuest V2i Protector™ restores Windows 2000 Servers in as little as a few 
minutes. Using PowerQuest's V2i technology, create precise, real-time backup images 
without bringing servers offline. Integrate V2i Protector 


into your tape backup routine today! 


V2i Protector 


PowerQuest V2i Builder™ is a storage lifecycle and Active 


PowerQuest 


State Management solution that automates OS 
deployments, migrations, software distribution and PC lifecycle management for 
enterprise organizations. V2i Builder extends traditional imaging by combining Virtual 


Volume Imaging (V2i) Technology together with plain-English, policy-based Action 


V2i Builder 20 


PowerQuest 


Sets to automate and streamline common IT tasks. 
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V2i Builder 2.0 


Your last line of defense is a solid 
Backup & Restore Solution! 


Protect your business critical data with VERITAS Backup Exec™ 9.0 
for Windows Servers - the next generation backup and restore solution providing 
VERITAS comprehensive, cost effective protection for Microsoft Windows server 
oops tree environments. A web-based administration console and new graphical user 
interface with easy-to-use wizards, simplify installation and enhance 
manageability. High performance agents and options deliver flexibility to help 


protect data quickly and reliably. 


_ Se 


(cone # car9013) 
£08339 BACKUP EXEC WINDOWS SERVER EDITION CD ROM ..sssscssssssssssssssesssessssessessensssenee $551.00 ea 


£09251 BACKUP EXEC WINDOWS SERVER EDITION FAMILY UPG CD ROM. ..ss000 .--$344.00 

£09722 BACKUP EXEC WINDOWS EXCHANGE SERVER AGNT W/CAL CD ROM .-.-$689.00 = 
£09234 BACKUP EXEC WINDOWS EXCHANGE SERVER AGNT UPGRADE CD ROM .. $135.00 VERITAS 
B60144 BACKUP EXEC NETWARE INTELLIGENT DISASTER CD ROM.scsccesseecssecssecsssscsessesesenee $343.00 
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Securing the enterprise oftware 


is a security management solution 
for IBM WebSphere MQ that greatly enhances the native security environment of WebSphere 
MQ. |t upgrades data protection to provide application-level, data protection for WebSphere 
MQ-based applications, including those already deployed - without the need to modify or 
change them. Application-level data security is critical for customers using WebSphere MQ 
to process sensitive data, such as high value financial transactions human resources (HR) 
data, medical records, or any other type of Personally Identifiable Information. It also 
provides central management of security policies for WebSphere MQ, including message 
integrity and confidentiality, audit, and queue put-and-get access control permissions from 
a Web-based administration tool. 


offers a centralized security console to monitor 
events on a number of systems and quickly respond to security attacks. By integrating with 
a variety of sources - firewalls, intrusion detection systems, antivirus, applications, 
scanners, routers, and so forth - and combining intrusion detection tools and a DB2® 
database, Intrusion Manager helps secure a customer's environment and brings together 
data collection, analysis, and problem resolution into a single monitoring system. Well 
suited for the medium size business, Intrusion Manager is a security management solution 
that allows businesses to reduce security costs, better address security threats, and make 


more informed decisions 


There are licensing programs available for IBM Tivoli Access Manager & IBM Tivoli intrusion Manager. 
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Brother MFC 


brother® is committed to providing superior and reliable business tools that increase productivity and 


reduce costs as businesses attempt to meet their organizational goals and challenges. By working 


closely with its customers, and by conducting continual market research, Brother has developed a wide 


range of sophisticated and innovative technologies that result in products providing a wealth of 
features and benefits. Brother's range of products includes business machines, communications 


products, and labeling and identification systems. 


E31664 BROTHER MFC5200C INKJET 


B&W 15PPM 


C86364 BROTHE! 
D98929 BROT 
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Lexmark C912 


E38708 LEXMARK 14 


)E FAX MACHINE 


N 17PPM PRINTER 2400 x 6( 


£38843 BROTHER HL-5O70N B&W 





JLT 2400 X 1200DPI/8MB PARA&USB ...eeeee $322.00 
OOX600DPI 8MB USOC RJ1 $419.00 ee Sk 
15PPM 8MB 203X980P I... . (CODE # CAT9O15) 
PRINTER 2400 X 600DPI/8MB PARA&| Reg. $299.00 ee eee 
)0 DPI/16MB PAR/USB/EN $537.00 


Lexmark’s New Solution Printers 


The Lexmark T420 laser printer is an easy-to-use general-purpose printer that 
provides optional network capability and a space-saving design. Duplex capability 
and 350-sheet input are both standard features on this low-profile printer. A fast 
200 MHz processor and 16MB of memory are also standard on the base model, 
providing exceptionai print performance of 22 ppm and a 10-second time to first 
page at 1200 image quality resolution. Optional memory, input capacity and high- 
yield print cartridges are available. Excellent performance, sturdy product design 
and easy-to-use cartridges make the Lexmark T420 an excellent choice for small 
businesses or workgroups. 


The Lexmark C912 wide-format color delivers sharp business graphics and 
professional documents at 28 ppm color and black on various media types. With a 
600 MHz processor, a finisher option, 2400 Image Quality, automatic color 
correction and high-capacity paper capability, the Lexmark C912 can handle 
complex jobs and provide superior print quality for high-volume applications. 


Full line of lasers, Multi-Function, inkjet, All-In-Ones and Dot Matrix available. 


(CODE # CAT9021) 
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$669.00 
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Considering a new printer? 
Why not test-drive an Oki Data 
model for 30 days - FREE! 


When it comes to higher productivity 
and cost efficiency, Oki Data printers are 
it. But why take our word for it when 
you can see for yourself? Now you can 
evaluate an Oki Data printer for 30 
days, FREE. Call Softchoice to find 
out how you can arrange to receive a 


free trial printer. 


Oki Data — the productivity printers 
that bring cost-effective, fast, high- 
quality color or black and white 


printing in-house. 


OKI® gives you stand-alone and 
network business printing without 
compromise. Whether you need 
monochrome or stunning, vibrant full- 
color, OKI printers deliver clear, sharp 
results at industry leading speeds. 
When you add it all up, there's only one 


. clear choice: ni 
5000 Series B6100 


OKI, The Only Color For You. 


D79759 OKIDATA C7300N COLOR 20/24PPM PRINTER 1 iiaainesh ade 
D79838 OKIDATA C9300N COLOR 30/37PPM PRINTER 1200 X 600DPI/128MB PARA/USB CODE # CAT9017 
E12385 OK! C51 R X600DP! 32MB USB wala 
E11020 OKIc 

E12400 oKil 

E37165 OKID 
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Plug and protect. 


Firewall appliance 


Symantec Firewall/VPN 100 
Symantec Firewall/VPN 200 
Symantec Firewall/VPN 200R 


Symantec VelociRaptor 


# of users protected 


Up to 15 
Up to 30 
Up to 30 


Over 30 


J) softchoice 3 symantec. 
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revenue on ERP, the projects were 
more comprehensive. 

Evaluating the benefits of ERP proj- 
ects produced a top 10 list of intended 
accomplishments, according to Meta: 
replace outdated software, improve 
financials, improve analytics and deci- 
sion-making, standardize cross-plat- 
form processes, improve IT perfor- 
mance, improve customer service, get 
a single-system view, improve pur- 
chasing, improve order management 
and reduce personnel costs. Your ERP 
wish list may be somewhat different, 
but it should be substantiated by met- 
rics as well as testimonials from end 
users. 

Finally, the report revealed that ERP 
vendor marketing efforts appear to all 
be for naught. Companies aren’t par- 
ticularly enamored of e-commerce or 
supply chain wizardry. Rather, IT man- 
agers said they regard long-term part- 
ner relationships as the true selection 
criterion, not features and functions. 

And relationships are definitely an 
art, not a science. D 


DAN GILLMOR 
Spam 
Control Is 
Failing 
FEW YEARS AGO, I 
wrote that in the un- 
fortunate event of a 


global holocaust, the only sur- 


vivors would be spammers 

and cockroaches. On reflection, I real- 
ized how unfair I’d been. I apologize to 
the cockroaches. 

We are getting perilously close to a 
tipping point. As Federal Trade Com- 
mission Chairman Timothy Muris said 
April 30 as he welcomed experts in 
marketing, technology and law toa 
conference in Washington, unsolicited 
bulk commercial e-mail is threatening 
to wipe out the value of a communica- 
tions system on which we all now rely. 

The conference resolved little, ex- 
cept to amplify the need for some kind 
of fix. Rather, we need a variety of 
technological, social and legal fixes. 

It’s obvious why we still lack a legal 
fix. The direct marketing industry and 
its allies in technology don’t want any 
serious federal laws against spam, so 
we don’t have any. AOL Time Warner, 
Microsoft and several other big com- 
panies want a law that lets companies 


OPINION 


| spam a recipient once. Mar- 


keters would be obliged to 
honor “opt-out” requests 
from e-mail recipients. 
Lousy idea. Opt-out solu- 
tions put the onus on the 
end user, where it doesn’t 
belong. And given the num- 
ber of businesses in the U.S. 
alone, we could all spend 
the rest of our lives opting 
out of unwanted e-mail. 

Nobody believes that 
spammers, especially those 
from overseas, would sud- 
denly behave under a tough federal 
law. But a few prosecutions and jail- 
ings would certainly have some deter- 
rent effect. Maybe that will happen in 
Virginia, the first state to enact a law 
making some kinds of spamming a 
felony, with potentially severe penal- 
ties for violators. 

Some technical measures can help, 
but only at the margins. The chal- 
lenge-response systems jettison mail 
from people who don’t respond to a 


simple question that a 
computer can’t answer, but 
they ignore the truly seri- 
ous problem — the fact 
that spammers misuse re- 
sources they don’t own, 
even when the mail doesn’t 
get delivered. 

My personal solution 
works pretty well, though 
it steals several minutes 
from my day and doesn’t 
solve the stolen-resources 
issue. I get so much spam 
at my public e-mail ad- 

dress that I’ve taken to selecting the 
(relatively) small portion of mail I 
want to read and deleting the rest of 
the new mail in my in-box. On a less 
public account, I use a filter and occa- 
sionally check the automatically 
trashed items to ensure that I’m not 
deleting something I want. 

A notably bad idea is using the 
“black hole” lists that network vigi- 
lantes have created. Subscribers to 
these lists refuse to accept and deliver 
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| mail from domains deemed friendly to 


spammers. This method, of course, 


| sweeps up the innocent along with the 


guilty, which is an injustice. 

One of the more intriguing propos- 
als comes from Stanford University’s 
Lawrence Lessig. He’d like a bounty 


| system that rewards individuals who 
turn in spammers. I’m not convinced 


his specific idea would work, but he’s 


| clearly onto something important: giv- 


ing incentives and tools to people at 


| - : 
the edges of networks to take action 
| on their own. 


IT should lobby for something along 


| these lines. Imagine: A law that gave 


companies a way to sue spammers 
could turn e-mail into a profit center. 


| The more successful it became, of 
course, the quicker the spam plague 


would recede. It’s worth a try, anyway. 


| : : 
Not much else is working. D 





WANT OUR OPINION? 


More columnists and links to archives of previous 
columns are on our Web site 
www.computerworld.com/columns 





Novell Abdicated 


COULDN'T AGREE MORE with 

the users who would like to see 
Novell market NetWare more suc- 
cessfully [“NetWare Stalwarts Re- 
main Loyal Despite Dwindling Mar- 
ket Share,” QuickLink 37719]. Net- 
Ware is vastly superior to any Win- 
dows product for most users, but 
the right people didn’t get the mes- 
sage. Some technologically chal- 
lenged “suit” in the boardroom is 
making the decision to switch from 
NetWare to Windows because he 
saw a commercial on TV. But this is 
happening not because Microsoft 
won the war, but because Novell 
abdicated. 
Rod Anderson 
Brick, N_J. 


Who’s in Denial? 


S$ IT THE USERS of NetWare who 

are in denial, or those who have 
implemented Windows NT for the 
same services? | think the latter 
users are in denial about the fact 
that NT isn’t as stable, secure or 
easy to administer as NetWare. 

The IT professionals who are 

keeping NetWare do so not be- 
cause their continued use of Net- 
Ware is advantageous to their ca- 
reers, but because getting things 
done and keeping systems up are 





| advantageous to their careers. 
| Three years ago, | was told that | 
| was taking a risk by installing Net- 


Ware and eDirectory instead of 
moving to Windows 2000 and Ac- 
tive Directory from Windows NT 
4.0. Now we have a stable environ- 


| ment, supported by fewer staffers 
| than would have been required for 


the alternative, and we support 
workstations and servers at remote 


| sites around the globe without a 


hitch. We can administer the net- 
work and directory quickly and effi- 


| ciently and distribute applications 


at a moment's notice to anyone on 
the network. 


Jeff Dill 

| Senior manager of technical 

| architecture services, Aviall 
Information Services, Dallas 


Forgotten Pioneer 


READ WITH INTEREST Frank 
Hayes’ recent installment of “The 
Story So Far” discussing William H. 


| Inmon’s devising of and contribu- 


tions to the field of data warehous- 
ing [QuickLink 37146]. 

There can be little doubt as to 
the significance of Inmon’s work, 
but I was disappointed to see no 


reference to the comparably signifi- | 


cant work of Ralph Kimball, who, 
building upon the practical theory 
of contributors like Inmon, put forth 





a paradigm widely recognized in 
the data warehousing field and 


used throughout the industry today. | 
| the realm of the possible. With 
| every major leap forward in com- 


Thomas Palisano 
Wallingford, Conn. 


OS Does Matter 


EADER RUSSELL RUGGIERO 

wrote [QuickLink 37241] in re- 
sponse to Mark Hall's column 
“Does the OS Matter?” [QuickLink 
36387}: “Hall was right on. . . . The 
operating system should be trans- 


| parent. Whether 31-bit, 32-bit or 


64-bit - who cares, as long as the 
operating system is available, reli- 


Gates that the OS doesn’t matter. 
Toby Fruth 

Automation coordinator, 
Dallas 


| A Part of Evolution 


HE ARTICLE “Microsoft Releas- 

es 64-bit SQL Database” 
[QuickLink 38018] quotes James 
Governor, an analyst at RedMonk, 
as saying, “It's the same as ever 
with 64-bit. It's a technology in 
search of a mass-market applica- 
tion.” | find this to be a surprisingly 
old-school comment. The comput- 








| erindustry continues to improve 


performance and capability. With 
these improvements, we expand 


puter technology, applications have 
caught up, using more of the capa- 
bility. This, in turn, fuels further im- 
provements. Sixty-four-bit proc- 


| essing is the next logical step in this 
| evolution. As it becomes more 


commonplace, we will utilize more 
and more of its capability. Just as 

with 16- and 32-bit technology be- 
fore it, this demand won't be a lin- 
ear track; at some point, the de- 


| mand curve will go from a gradual 
| able, scalable and secure.” How of- | 
| ten have offerings from Redmond 
| been called “available, reliable, scal- | 

able and secure”? Try telling Bill 


increase to a near-vertical line. 


| Grant Carstensen 


Senior systems engineer, 


| Pratt & Whitney, 
| East Hartford, Conn., 


grant.carstensen@pw.utc.com 


| COMPUTERWORLD welcomes 
| comments from its readers. Letters 


will be edited for brevity and clarity. 
They should be addressed to Letters, 
Computerworld, PO Box 9171, 500 
Old Connecticut Path, Framingham, 
Mass. 01701. Fax: (508) 879-4843. 
E-mail: letters@computerworld.com. 
Include an address and phone num- 
ber for immediate verification. 


More letters on these and other 
topics are on our Web site 
computerworld.com/letters 








your servers, 
r business? 


If you're busy monitori 
who's watching yo 


The new HP ProLiant DL740 
8-way with hot-plug 
RAID memory. 


+ Ultradense 4u modular chassis 
with up to eight Intel” Xeon™ MP 
1.5 GHz or 2.0 GHz processors 

- Up to 64GB addressable memory 

- Groundbreaking F8 chipset 

+ 6-64 bit/100 MHz PCI-X slots 

- Integrated Lights-Out Standard 
(iLO) for Remote Server Mgmt 


The new HP ProLiant DL760 
G2 8-way with hot-plug 
RAID memory. 


+ Up to eight Intel® Xeon™ MP 
1.5 GHz or 2.0 GHz processors 
- Up to 64GB addressable memory 
- Groundbreaking F8 chipset 
+ 10-64 bit/100 MHz PCI-X 
1-64 bit 33 MHz slots 
+ Remote Insight Lights-Out Edition II 
(optional) for Remote Server Mgmt 


What challenges do you face today? Decreasing budgets? The 
lurking possibility of downtime? It’s hard enough to focus on 
moving your business forward when you're constantly looking 
over your shoulder to see if everything is up and running. 


Besides, that’s the job of the new HP ProLiant DL700 series 
running Intel® Xeon™ MP processors. An adaptive infrastructure 
begins with these HP ProLiant servers which come equipped 
with tools that predict, self-diagnose and fix many fault 
conditions. And now with hot-plug RAID memory exclusively 
from HP. you can add or replace DIMMs without turning 
your systems off. Both work with the HP ProLiant Essentials 
Foundation Pack featuring Insight Manager 7 software which 
monitors and controls your infrastructure for maximum uptime. 


At the end of the day, you'll have more control over your 
infrastructure, help avoid unplanned downtime and reduce 
overall maintenance costs. Not to mention freeing yourself 
up for more important things 


To learn how HP ProLiant servers can be a 
part of maximizing your company’s uptime, 
download CMP’s executive brief on high availability 
at www.hp.com/go/proliant85 or call 
1-800-282-6672, option 5, and mention code YPH. 
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Waves of Change oPmNiON = | Web Services in Action 
; Web Services Sharp Edge | Four pioneers that are exploiting this new 


Some CIOs say that Web 
services will hit IT like a Web services are part of a long technology to make valuable connections 

tidal wave, affecting a wide IT standards tradition. As such, | with customers, partners and suppliers share 
swath of IT realms, from | be aware that they’re limited | what they have learned on the bleeding edge, 
supply chains to CRM to in what they can do, says | of Web services. wi 
programming tools. columnist Mark Hall. 

| 





EDITOR’S NOTE 


K, I ADMIT IT: I don’t really know 
0 whether Web services will transform 

IT as we know it — or flop. 

For one thing, Web services are based on 
standards, which is a good thing, except 
that standards have a way of getting bogged 
down or fragmented or polluted and then 
fading away. 

Plus, there are serious security issues 
when exposing chunks of code to people 
outside the corporate firewall. (Just the 
word expose — common in Web services 
talk — is enough to give your security di- 
rector the willies.) And I’m not sure that 
enough thought has been given to liability 
issues, or even to how participants are going 
to make money with external Web services. 

My colleague Mark Hall certainly has 
a healthy skepticism about the grandest 
claims for Web services (page 34). So do I. 
But I think that if we tone down the hype, 
there are some modest expectations that 
have a good chance of coming true: 

XML and SOAP have a bright future. 
They’re simple. They each do one job and 
do it well. 

Jeb services will make it easier to inte- 
grate internal systems. If nothing else hap- 
pens, that will be a success story. 

Web services are likely to replace what 
we now call electronic data interchange. 
They’re a powerful tool for automating sup- 
ply chain activity among trusted partners. 

But will we have an economy based on a 
giant Yellow Pages directory listing thou- 
sands of public Web services, with elec- 
tronic transactions flying to and fro? Count 
me among the skeptics there. D 





Mitch Betts is features editor at Computer- 


# 3 
world. He can be contacted at mitch_betts@ 
computerworld.com. 
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HE IDEA BEHIND WEB SERVICES is 

simple: Send a message across a 

network that triggers an action 

at the other end — often at an- 
other business. But getting to today’s 
Web services has required simplifying 
several complex technologies: client/ 
server, EDI and SGML. 

Client/server got its start in 1981, 
when the founders of an early relation- 
al database company wanted to sepa- 
rate the database from the applications 
that used it. Bob Epstein, Paula Haw- 
thorn and Mike Ubell founded Britton- 
Lee Inc. to make a stand-alone data- 
base server called the Intelligent Data- 
base Machine (IDM). The idea was for 
a large computer to send database 
queries to the IDM for better perfor- 
mance, security and simplicity. 

But the IDM’s proprietary hardware 
couldn’t keep pace with the rapid per- 
formance improvements in Unix 
servers in the 1980s. Epstein soon 
helped found a new software company 
that used the same idea without the 
specialized hardware. Sybase Inc. 
made client/server computing both 
practical and popular. 

Other developers took the client/ 
server idea beyond database access. By 
1983, two researchers at Xerox Corp.’s 
Palo Alto Research Center (PARC), 
Andrew Birrell and Bruce Jay Nelson, 
had developed a system of remote pro- 
cedure calls, or RPCs, so one computer 
on a network could ask another to per- 
form some of its computing work. And 
in 1984, Sun Microsystems Inc.’s Bill 
Joy led the development of Network 
File System, which used RPCs to give 
computers on the same network access 
to one another’s files. 

But sharing data, files and even com- 
puting processes within one compa- 
ny’s network was far simpler than 


1981: Bob 
Epstein (right), 
Paula Hawthorn 
and Mike Ubell 
separate applica- 


1969: IBM develops 
GML for tagging con- 
tent in documents for 
law offices. 
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tions from databases with their 
Intelligent Database Machine.» 
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Far 


Web services are built on the 
shoulders of earlier technologies, such as 
client/Server and EDI. By Frank Hayes 


sharing business data among compa- 
nies. That had already begun in a limit- 
ed way when a group of trucking, rail- 
road and shipping companies formed 
the Transportation Data Coordinating 
Committee in 1975 to develop standard 
electronic versions of shipping mani- 
fests and other documents. 

By the early 1980s, electronic data 
interchange (EDI) was being used in 
the automotive, retail and transporta- 
tion industries. But EDI was compli- 


1986: SGML becomes an 











1975: The transportation 
industry develops a system 
of electronic shipping mani- 
fests, called electronic data 
interchange. 


1983: Andrew Birrell 
and Bruce Jay Nelson at 
Xerox PARC implement 
the first working RPCs. 


1984: Sun uses 
RPCs for its Network 
File System. 


official international standard. 
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| cated. Far more information could go 
into a standard EDI document than 
most companies needed, so they used 
custom versions, and it was difficult to 
keep track of which suppliers and cus- 
tomers used what EDI subset. EDI 
messages were also usually sent over 
expensive private networks. 

How could the complex EDI mess be 
simplified? The solution was already 
being developed. In 1969, three IBM 
developers working on a computer sys- 
tem for law offices came up with a way 
of using standard tags to identify con- 
tent within documents. Charles Gold- 
farb, Edward Mosher and Raymond 
Lorie called their system the General- 
ized Markup Language, or GML — a 
name that happened to include the ini- 
tials of its three inventors. 

By 1980, IBM was successfully using 
GML in products, and standards orga- 
nizations were developing a standard- 
ized version. In 1986, Standard Gener- 
alized Markup Language (SGML) be- 





1996: The WSC begins 
developing a “simplified 
SGML,” which becomes 
known as XML. 


1998: Microsoft com- 
bines XML and HTTP 
into SOAP. 


| came an official international standard. 
Like EDI, SGML was large and com- 
plex. But SGML included a system for 
specifying well-defined subsets of the 
complete set of information tags. 

One such subset took off in 1991, 
when researcher Tim Berners-Lee at 
Swiss research laboratory CERN cre- 
ated Hypertext Markup Language 
(HTML) for the first Web browser. In 
order to send and receive HTML Web 
pages, Berners-Lee also devised a sim- 
plified version of the standard Inter- 
net File Transfer Protocol — which he 
called Hypertext Transfer Protocol, 
or HTTP. 

And in 1996, a World Wide Web 
Consortium (W3C) working group 
created the first draft of what it called 
a “simplified SGML.” Two years later, 
Extensible Markup Language, known 
as XML, was a standard that some IT 
shops began to use in e-commerce. 

By 1998, researchers at Microsoft 
Corp. were putting the pieces togeth- 
er: RPCs in the form of documents 
tagged with XML and sent across the 
Internet using HTTP, doing what EDI 
did and much more. They dubbed 
their system the Simple Object Access 
Protocol, or SOAP. 

IBM joined the effort in 2000, and 
the two companies defined the Web 
Services Description Language (WSDL) 
for identifying the capabilities avail- 
able from a Web services provider, and 
the Universal Description, Discovery 
and Integration system, or UDDI, for 
directories of Web services. 

And in 2002, the Web Services Inter- 
operability Organization brought in 
dozens of other vendor and user com- 
panies, with the promise that Web ser- 
vices would simplify both e-commerce 
and IT services. 

And now, on with the story ...D 





2000: IBM and Microsoft 
announce WSDL and the 

UDDI directory system for 
Web services. 
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1991: Tim Berners-Lee, 
at Swiss research lab 
CERN, creates the first 
Web browser and defines 
HTTP.¢ 
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2002: The Web Services 
Interoperability Organiza- 
tion is formed by IBM, Micro- 
soft and other vendors and 
user companies. € 








It’s time the ultimate 64-bit server 
and the ultimate 32-bit server z 
were the same server. 


Introducing the AMD Opteron” processor, 64-bit computing for today’s 32-bit world. 
It’s the only processor that is designed to run your 32- and 64-bit applications simultaneously and without compromise. 
AMD Opteron runs on AMD64—a breakthrough architecture that enables 64-bit technology on the x86 platform— 


creating a new class of computing so you can migrate to 64-bit technology on your own terms. 


The world’s highest performing 2P and 4P servers are now powered AMD 


by AMD Opteron processors. Receive the performance and security benefits of 
Cc Opteron: 


64-bit computing, while getting the best 32-bit performance available anywhere. 


Leverage your existing investments while preparing for the future. One architecture 
across one enterprise means you won't have to rip and replace your entire infrastructure when you transition 
to 64-bit computing. It’s just another way AMD designs and builds processors with you in mind. For a closer 


look at the financial and performance advantages of the AMD Opteron processor, visit www.amd.com/opteron 


© 2003 Ad 
Opteron 


PETTITT ATLTT Eee 


COMPUTERWORLD May 19, 2003 www.computerworld.com 


| Web services could 

| affect a wide swath of 

TT activities, from 
supply chains to CRM 
to programming tools. 


By Bob Violino 


By 

| EB SERVICES promise to be the 
technological equivalent of 
being in the right place at the 
right time with just the right 
information at your finger- 
tips. And some say the tech- 
nology will hit the IT world 

| like a tidal wave. 

“Web services is a tsunami of technology evolu- 
tion,” Andre V. Mendes, chief technology integration 
| officer at Public Broadcasting Service (PBS), said at 

the Computerworld Premier 100 IT Leaders Confer- 
ence in February. He said the Alexandria, Va.-based 
nonprofit organization uses Web services to connect 
upstream with content developers and producers 
and downstream with public TV stations and view- 
ers. “What we’re developing is a supply chain opti- 
mization that puts us right in the middle of this 
equation,” said Mendes. 

Over the next several years, Web services are like- 
ly to enable companies to get a lot more out of tech- 
nologies such as supply chain systems and CRM, and 
they’re likely to make it easier to build new applica- 
tions and integrate existing ones. Here are some 
snapshots of how Web services are expected to 
change key parts of the corporate IT agenda: 


ATHERINE LAMBERT 


_ chief technology integration officer at PBS, calls Web services “a tsunami of technology evolution.” 
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Business Intelligence and CRM 


Most of th 
There'll-be more RQ aSaeS 
intelligence and 
aE eB, CRM vendors 
UR Nese eMle()eRMe Plan to support 

Web services in 
their products or are already doing so, and Web ser- 
vices are expected to make those applications more 

Continued on page 33 
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Anyone managing an investment 
portfolio — from a mutual fund man- 
ager to the individual with an IRA — 


understands the challenges of the | 


present economy. There isn’t as much 
money available for investment as one 
would wish. And it’s harder than ever 
to know how to invest it. The days of 
the sure bet and ever-rising stocks are 
long behind us. Today’s reality is less 
about speculation and more about 
conservation. 

To those of you running an IT 
organization — or concerned with the 
impact of IT on your business — this 
should sound familiar. In today’s IT 
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environment, there are more projects 
clamoring for dollars than there is 
budget available. And it’s never been 
harder to make choices between 
potential IT investments. The easy 
stuff has already been eliminated — the 
trivial projects, the experimental 
pilots, the stuff that was “cool” but 
unnecessary — all long gone. With the 
continuing squeeze on costs, finding 
new places to cut is going to hurt, and 
could potentially damage the business 
as a whole. 

Maybe it’s time to take a lesson 
from the mutual fund manager. 

Consider all your IT projects as a 
pool... a collection of investments... 
a portfolio, in fact. With limited dol- 
lars to put in and a goal of maximiz- 
ing the return on the money invested, 
how do you decide how to allocate the 
funds? Look at each individual invest- 
ment and ask yourself “Should we 
buy? Hoid? Or sell?” 

REACHING THE 
END OF THE ROAD 

Once IT projects are seen as a port- 
folio of investments, rather than a 
series of projects, it’s logical to look 
for the best way to manage those 
assets. Decisions on which 
initiatives get funding can 
be made on the basis of 
value to the business, 
rather than subjective fac- 
tors. Since investing more 
in one project means 
investing less in another, 
the decision-making 
process is reduced to a 
series of comparisons 
between the costs, risks 
and rewards of actual and 
potential investments. 

The portfolio approach 
also makes it natural to 
consider the useful life of each asset — 
the point at which it becomes logical 
to “sell,” or retire the asset. In cash- 
strapped IT organizations, it can be all 


Savvy CIOs will 
engineer their IT 
operations for 
maximum efficiency, 
effectiveness, and 
continuous 
improvement through 
a value-creating 
portfolio, including 
benchmarking and 
measurement. 
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td easy to hold on to systems that 
have long since passedstheir useful 
lifetimes: the theory that ifit#n’t bro- 
ken; why fix it? The cy Systems 
often have dedic Vocal — 
Sac within the internal cus- 
tomer base, providinganother i incen= 
tive to simply avoid raising the 
replacement question. In reality, how= 
pportunity cost of 


P@ecide between 
competizg ffives? For our friend 
the mutual fund manager, objective 
decision-making requires two things: 
metrics for all of the contenders based 
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epic. But that doesn't 

Se start-up in the eyes of a 
Mager. In the same way, the 
6 Management solution is 
enough to accommodate met- 


mei es of different types, coaxing infor- 


mation out of the available data that 
allows meaningful comparisons to be 
made between new opportunities and 
existing investments. 
ARE WE ALL 
ON THE SAME PAGE? 

The second challenge — developing 
criteria for choosing between con- 


on a common standard, and a set of | tenders — is where the true power of 


criteria for selecting win- 
ners and losers based on 
those metrics. In the IT 
environment, Portfolio 
Management — such as the 
Pacific Edge Software 
solution — provides a 
framework for consider- 
ing invest- 
ments — and 
their require- 
ments for 
money, time, 
resources and 
effort — in a 
rational, 
standardized way. 
The first challenge is to 
develop appropriate 
common metrics. An 
obvious problem is that 
much less is known 
about a new initiative 
than about an on-going 
project. To take an extreme example, 
with a great idea sketched on the back 
of a napkin, there’s almost no data; 
with a 5-year-old solidly running 


Basically, you’re 
concentrating on the 
results. That requires 

a different kind of 
management. You're 
focusing more on 
performance and 
outcomes, and less 
on processes. 

— Matthew Light of 


Gartner, reported in 
Software Magazine 


Portfolio Management 
begins to show itself. In 
the same way a mutual 
fund manager balances 
the mix of investments in 
her portfolio based on the 
fund’s objectives —- 
income, for example, or 
short or long-term 
growth — so can the IT 
portfolio be balanced by 
defining goals for the IT 
organization and the 
business as a whole. 

Portfolio Management 
makes these objectives 
explicit and measures each potential 
investment in terms of how much it 
contributes to achieving them. The 
result is a portfolio of IT investments 
that is aligned with, and will help real- 
ize, corporate goals. 

This can lead to some surprising 
revelations. One large wireless service 
provider, for example, implemented 
Portfolio Management across its 


CONTINUES ON NEXT PAGE 
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entire IT activities. It quickly became 
apparent that while improved cus- 
tomer service and responsiveness was 
the over-arching corporate objective, 
very few of the company’s IT initia- 
tives were related to achieving this 
goal. Funding decisions were being 
made, not on the basis of their impact 
on customers, but on the IT organiza- 
tion’s internal criteria. Portfolio 
Management helped reconnect the 
company’s IT efforts to its corporate 
strategy. 

Another common surprise is that 
many efforts are overlapping — or that 
synergies are being missed among ini- 
tiatives which address common prob- 
lems. One large insurance company, 
with several hundred projects, discov- 
ered numerous such cases and was 
able to streamline and consolidate 
many projects into one. That 
improves overall portfolio perform- 
ance and frees up dollars for further 
investment. 

THE TOOLS TO MANAGE - AND 
CREATE — CHANGE 

A final characteristic of the mutual 
fund is that it is actively managed: the 
mutual funa manager is constantly 
adjusting the investment mix, testing 
different scenarios and considering 
new investment opportunities. In the 
IT environment, Portfolio Manage- 
ment provides the tools to facilitate 
the same active management — ensur- 
ing the portfolio is always delivering 
optimum performance. What if we 
cancel this project? What if we need 
those resources for something else? 
What if our objectives change? How 
fast could we respond to a competitive 
challenge? 

For the mutual fund manager 
turned CIO, these questions are the 
order of the day. Trying first one 
option, then another, comparing the 
outcomes to current results, and con- 
stantly optimizing the investment 
mix, he or she creates a closed-loop 
cycle of continuous improvement — 
and an IT portfolio that truly creates 
value for the organization. 
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SPECIALFEATURE 
KNOW WHAT YOU'RE DOING. 
AND WHY YOU’RE DOING IT. 


Sa 
ame 


With all the projects and investments your 
business has going on, how do you align that 
portfolio with your business needs? The Pacific 
Edge Enterprise Portfolio Management solution 


is based on a powerful, but straightforward 


process that does just that, it transforms the 


way projects are evaluated, and new initiatives 


considered. 


When it comes time to kill off an 
IT investment, the protests can range 
from the vehement to the vitriolic. 
The soft targets have all been picked 
off long ago, so whatever project you 
ax now, you're killing somebody’s 
pet. Often, it’s the older, legacy sys- 
tems that attract the staunchest 
defenders. “We've paid for it already,” 
they say. “It works. It costs us nothing 
to keep it.” And that old favorite, “It 
ain’t broke, so why fix it?” 

It can be downright tough to get 
the customer to agree to turn off life 
support, but the truth is, keeping an 
old system alive does cost money. So 
try turning the argument around: 


BUSINESS FOCUS 


Killing Me So 


“Here’s what you could have if we did 
flip the switch on the old one.” 

Make the buy-hold-sell argument 
to the customer and let them share in 
the decision. Portfolio Management 
is an effective tool for making the 
irue costs visible, and presenting the 
new opportunities in ROI terms that 
any manager can relate to. 

If the experience of oilfield servic- 
es conglomerate Schlumberger is 
anything to go by, a well-managed 
process, with analysis tools and rec- 
ommendations, can reduce the frus- 
tration level and the discussion 
length when these decisions are being 
made. This helps avoid the overpro- 


PHASE 1: PLANNING 

The Enterprise Portfolio Manage- 
ment process starts by assessing each 
potential new investment, along with 
the resources that comprise the orga- 
nization’s portfolio. 

Existing investments are modeled 
and captured in the portfolio invento- 
ry. Detailed information may be cap- 
tured directly - or imported from 
other tools such as spreadsheets, 
accounting and project management 
packages. 

With the portfolio of potential 
investments defined, each investment 
is categorized and qualified, based on 


tection of historically powerful budg- 
et areas, and creates a better balance 
between strategic and business-cen- 
tric competing projects, such as secu- 
rity vs CRM. It also avoids the “mem- 
ory loss” problem of large long-run- 
ning projects, whose originally 
approved budget can be lost after a 
few years. 

So when the time comes to kill, 
Portfolio Management makes it easi- 
er to pick a project. You may not win 
everyone round. But with Portfolio 
Management you will be making a 
sound business case. 


The recent META Group White Paper, IT Investment Management: Portfolio Management Lessons Learned, provides a more 
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the organization’s management tech- 
niques, operational processes and best 
practices. Key information such as the 
business case, resource requirements 
and alignment to corporate strategy 
are captured. 

Then, each investment is priori- 
tized, weighted and ranked using a 
scorecard approach, to measure its 
value against standardized, objective 
metrics such as risk and potential 
return. 

PHASE 2: ANALYSIS 

Executives and managers can 
review key information from multiple 
perspectives, such as investment type, 
sponsoring organization, objectives 
and priority, to gain a thorough 
understanding of the entire portfolio. 

Each existing and _ potential 
investment is examined to determine 
that it is: 

* achievable, given the resource con- 
straints of the organization 

* balanced, in terms of potential risk 
compared to its value to the organization 
* aligned with strategy and corporate 
objectives 

* ranked in order of priority, based 


on its ability to deliver maximum 
business value. 
PHASE 3: OPTIMIZATION 
With the information quantified, 

standardized and accessible, it is now 
much easier to collaborate on selecting, 
prioritizing and sequencing projects. 

In practice, this is done by select- 
ing for specific combinations of vari- 
able constraints — such as investment 
risk and cost. 
Selection criteria can be modified to 
generate alternative portfolios, which 
are then compared and refined. 

Through this collaborative 
process, an optimum portfolio of 
investments can be defined that best 
matches the organization’s chosen 
strategic planning objectives. 
PHASE 4: MOBILIZATION 

Now, the realigned portfolio is 

translated into actionable plans. 
Investment priorities, milestones, 
resource allocation, and budget infor- 
mation are distributed to the opera- 
tional staff responsible for managing 
the assets, resources, projects and 
products. 

From this point on, lifecycle 


inclusion, value, 


AN ela 


Se 


management tools and status and 
performance management tools are 
used to monitor the performance and 
results of each initiative as it moves 
from initial concept to completion. In 
the case of assets, similar lifecycle 
management is applied as the asset 
transitions towards retirement and 
replacement. 

GOING FORWARD, the results of 
each investment can be assessed in 
terms of its impact on the organiza- 
tion’s overall goals. 

Pacific Edge takes a “closed loop” 
approach to Enterprise Portfolio 
Management, allowing project, asset 
and product investments to be inven- 
toried, analyzed, planned and tracked 
throughout their entire lifecycles. As 
progress is made, external factors 
change, and business 
evolve, the portfolio information is 
constantly updated to reflect the new 
reality. 

Pro-active planning can also be 
performed using “what if...?” analysis 
and “sandbox” trials to compare alter- 
native investment scenarios and test 
conditions. 


objectives 
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AT THE HEART OF THE ENTER- 
PRISE PORTFOLIO MANAGE- 
MENT PROCESS are the individual 
investments — assets, products, proj- 
ects and resources — that together 
comprise the enterprise portfolio. 
Most organizations have a large num- 
ber of investments, which will typical- 
ly be of several different types, each 
mapping to different functional 
needs. 

As a result, a complete enterprise 
portfolio can be highly complex, and 
the Pacific Edge Enterprise Portfolio 
Management solution includes the 
ability to logically group and manage 
“partitions” so that R&D investments, 
for example, can be planned and eval- 
uated differently than IT investments. 


. 
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IN ACTION 


Improving the Health of the Enterprise Portfolio 
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Leading healthcare provider Mercy Health Partners needed a way to balance its large, and growing, volume of IS projects against a fixed pool of 
resources. There was also the challenge of aligning projects with strategic business goals in a rapidly-changing industry. Enterprise Portfolio 
Management was a bold approach — and one which has had a positive impact beyond the IS department, maximizing value across the organization. 


When James J. Albin joined Mercy 
Health Partners as CIO, he immedi- 
ately realized his Information Services 
department needed a way to quickly 
identify what IS projects were in 
progress, and how they impacted the 
department’s limited resources. A rec- 
ognized leader in providing quality, 
healthcare, Mercy 
Health encompasses six hospitals in 
southwest Ohio. With a medical staff 
of 1,600 professionals, Mercy Health 


cost-effective 


is also a regional leader in collaborat- 
ing with other organizations to meet 
community needs. 

Like many IS departments in an 
industry where consolidations and 
cutbacks are commonplace, Mercy 
Health Partners faced many chal- 
lenges — not the least of which was 


managing some 4,000 projects at any 
one time. Their project management 
system consisted of a trouble-ticket- 
ing system for allocating work, cou- | 
pled with an internally 


developed accounting 


“The Enterprise 


a strategic level. “We use Pacific Edge 
to effectively prioritize and track our 
project portfolio, manage resources, 
and validate the IS department as a 
valuable asset to the 
organization,” says Mr. 


system based on 


Microsoft® Access. 
Clearly, there was a need 
for a more robust 
approach to managing 
the project portfolio and 


resource utilization. 


Portfolio Management 
solution from 
Pacific Edge was a 
major contributor in 
reducing our IT costs 
by $4 million.” 


Albin. “The healthcare 
industry is focused 
on cost consolidation, 
which increases demand 
for IT. So we needed 
a solution that could 


help us maximize the 





HANDLING QUANTITY, DELIV- 

ERING QUALITY 
James Albin 

nized that a comprehen- 


recog- 


sive Enterprise Portfolio 

Management solution 

was the answer — a solu- 
tion that 
could help Mercy Health | 
proactively plan and man- 
age their IS portfolio, easi- 
ly track where time was 
being spent, and ensure 
enough 
available. 


resources 
“We 
something that could han- 


were 


needed 


dle the large volume of 

projects and focus on 

resource utilization. But 
we found that not very many solu- 
tions were available for IT, “ says Mr. 
Albin. 

After an extensive review, Mercy 
Health 
Portfolio Management solution from 
Pacific Edge Software of Bellevue, 


selected the Enterprise 


Wa., because it could not only handle 
the volume and details of projects, but 
also report on the project portfolio at 





This special feature on Enterprise Portfolio Management was brought to you by Pacific 
Edge Software, the leading provider of Enterprise Portfolio Management software for 
global organizations. Pacific Edge delivers closed-loop management solutions that help 
businesses maximize value and reduce risk in their investment, project, and product 


portfolios. 


Pacific Edge’s business-critical solutions include Project Office® and Portfolio Edge 
enterprise software products, professional services, industry-specific templates, and a 


proven portfolio management process. 


James J. Albin, 
Vice President e& CIO 
of Mercy Health For 
Partners 


value of our IS 
portfolio.” 

BENEFITS TO IS AND 
BEYOND 

Mercy Health 
Partners, Enterprise 
Portfolio Management 
has delivered on_ its 
promise. Besides significant improve- 
ments to productivity, the Pacific 
Edge solution has benefited the IS 
department through: 

¢ Aligning projects with strategic 
goals. With clear visibility into project 
portfolios through easily accessible 
reports, executives and senior manage- 
ment can make better business deci- 
sions based on strategic goals. They 
analyze budget and time information, 
obtain project completion reports, 
prioritize projects based on objective 
criteria, and understand the impact of 
resource management decisions. 

* Improved resource allocation. 
With 100% of resources tracking time, 
Mercy Health’s IS department has reli- 
able data from which to analyze how 
and where resources are being used. 
This allows the department to priori- 





tize projects based on resource avail- 
ability. Even after a 25 percent reduc- 
tion in resources, there has been no 
reduction in customer service or proj- 
ect quality, thanks to this ability to 
prioritize. 
* Greater customer satisfaction. 
Since the IS department’s internal cus- 
tomers now have access to project 
information, they are accountable for 
the quality of their own projects. The 
department uses reports to clearly 
communicate the number of projects 
in a customer’s queue, and the number 
of resources available to work on them 
— empowering the customer to set 
their own project priorities. 
¢ Enhanced project approval and 
prioritization. Each potential project 
passes through an approval commit- 
tee, which now has access to reports 
that easily identify high-priority legal 
and regulatory projects, as well as 
projects to be approved, canceled, or 
escalated to the executive committee. 
Projects stay within limits, backlogs 
are avoided, and project prioritization 
and balance is more easily maintained. 
For Mercy Health, Enterprise 
Portfolio Management has become 
more than just a means of managing a 
large volume of projects; it is now a 
key tool for improving business 
processes to ensure an achievable 
investment portfolio — one with the 
right balance of investments to 
achieve the greatest return. 


To explore how Enterprise Portfolio Management can help you align investment and 
development activities with business strategy, please contact us at: 


Pacific Edge Software, Inc. 
Phone (425) 897.8800 

Fax (425) 897.8900 
E-mail info@pacificedge.com 
Web www. pacificedge.com 
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Continued from page 28 
readily available to internal users and external busi- 
ness partners. 

Web services — with their standardized applica- 
tion programming interfaces — will allow analytical 
tools to be more easily embedded in standard appli- 
cations, says Michael Corcoran, chief communica- 
tions officer at Information Builders Inc. in New 
York. The latest release of the company’s business- 
intelligence product supports Web services, allowing 
reports to be created and published as a Web service 
accessible from Java 2 Enterprise Edition or Micro- 
soft Corp.’s .Net environment. “Web services will 
make business-intelligence components usable with 
many other applications,” such as call center or Web 
customer service applications, Corcoran says. 

Just imagine the systems that could be improved 
with real-time transactional data delivered by Web 
services. For example, a manufacturer could use a 
business-intelligence system to forecast demand for 
raw materials and then employ Web services to relay 
the data to numerous suppliers producing those ma- 
terials. An insurance company could more easily and 
quickly send CRM information — such as a cus- 
tomer’s previous complaint about a policy — to a call 
center agent to help provide better service. 

“The point of Web services is to make it easier for 
people to construct and integrate applications,” says 
Henry Morris, an analyst at Framingham, Mass.- 
based market research firm IDC. “Web services, 
combined with standards like XML, will make it easi- 
er for people to tie business-intelligence and CRM 
applications together. That’s where you get the real 
value out of business intelligence; not just getting a 
report, but being able to act on it and get feedback.” 

Joe Wanzek, vice president of IT at American Eq- 
uity Investment Life Insurance Co. in Des Moines, 
Iowa, says his company already has an in-house CRM 
application that provides transaction information to 
customer service representatives. But with Web ser- 
vices, Wanzek expects to be able to deliver that data 
via the Internet to customers just as quickly. That 
will eliminate the need for costly and time-consum- 
ing phone calls to work out customer complaints or 
answer queries, he says. 


Supply Chain Systems 


The adoption of 
Web services is 
expected to en- 
hance the way 
businesses con- 
duct transactions 
with one another electronically and the way informa- 
tion moves through the supply chain. 

Mitsubishi Motors North America Inc. in Cypress, 
Calif., uses Web services to link 700 dealers through 
its portal — a single point of entry for dealers online, 
says CIO Tony Romero. “Anything a dealer needs to 
do can be done through the portal, no phone calls 
necessary,” he says. 

The key to easier integration is the fact that Web 
services are based on widely adopted standards such 
as XML. “It changes the integration game; it will be 


‘Transactions with 
trading partners will 
be 








Vendor Says 
Mobile Apps 
Are Years Away 


The combination of Web services and 
mobile devices such as cell phones, PDAs 
and tablet PCs will give users customized 
access to critical data in real time, says 
Joe Owen, chief technology officer at 
XcelleNet Inc. in Alpharetta, Ga., which 
offers software for connecting mobile 
users and remote sites to corporate 
systems. For example, he says, a sales 
distributor in the field could use a single 
application from a mobile device to access 
inventory data or customer profitability 
information - without the need for a large 
and costly data warehouse. 

But Owen notes that many of the thin- 
client benefits of Web services are likely 
years away from commercial availability 
because of the limitations of current wire- 
less network connections. 

Yet the marriage of Web services and 
mobile devices is inevitable, he says, be- 
cause on-the-go employees will need ac- 
cess to various types of corporate data 
behind the firewall. Web services will pro- 
vide a means for companies to integrate 
enterprise applications and mobile devices 
without spending big bucks on integration 
projects. 

“With Web services, you can provide 
access to applications [from mobile de- 
vices] without having to consolidate data 
from wildly different formats and databas- 
es,” Owen says. 

- Bob Violino 


much easier to [link systems] because of the open 
standards,” says Toby Redshaw, corporate vice presi- 
dent of IT strategy, architecture and e-business at 
Motorola Inc. 

“When you map the supply chain today, starting 
with source material, all the way to product repair, 
you'll find there are 10 to 12 disconnected processes 
with big gaps and integration issues,” such as how to 
handle product repairs and returns, Redshaw says. 
Web services will help trading partners fill those 
gaps by providing better communication among their 
supply chain applications, he adds. 

In many cases, transactions among trading part- 
ners, such as ordering supplies, fulfillment, billing 
and inventory management, will be wholly automat- 
ed, says Mike Gilpin, an analyst at Giga Information 
Group Inc. For example, a retailer could develop a 
standardized, automated program for ordering goods 
and then use the program to allow its purchasing ap- 
plications to work with suppliers’ inventory systems. 

This will be a less complex and time-consuming 
endeavor than it would be without Web services. 
Automation will also help reduce costs, Gilpin says. 
“One of the impediments to B2B commerce has been 





cost, and I think costs will be reduced gradually by 
Web services,” he says. 

In addition, Gilpin says, the combination of Web 
services and technologies such as radio frequency 
identification tags will enable companies to track the 
location of products in real time as they move 
through the supply chain, while gathering data about 
overall demand, purchasing trends and inventory. 

Within three years, Redshaw predicts, intelligent 


Des , : 
Web services will emerge that completely automate 
| alot of supply chain management functions, such 


as handling customer queries from call centers or 
feeding customer-retention data to salespeople 
in real time. 


Application Development 


Industry experts ex- 
pect Web services to 
speed up and simplify 
application develop- 
ment, allowing IT de- 
partments to not only 
create new applications in less time, but also to de- 
liver them to more internal and external users. 

“You won't see a whole new array of things that 
you couldn’t do before because of Web services, but 
you'll see application development enabled much 
more quickly,” says Larry Calabro, a partner in the 
technology integration unit at Deloitte Consulting in 
Chicago. Calabro says Web services standards will 
make it easier for companies to build applications 
that more effectively integrate existing software 
packages such as CRM and ERP. “The focus of appli- 


Development 
will be alae 


recy cled code. 


cation development will be to make all those assets 


work together to better meet business goals and bet- 
ter serve customers,” he says. 

Web services will make it easier for less-skilled 
people to more rapidly build applications through 


| their standardized application development tools, 


says Michael Blechar, an analyst at Gartner Inc. 
“Web services standards like XML and UML are 
providing much more automation” in the process of 
developing and sharing applications, Blechar says. 

The ability to recycle software code is another 
benefit, he says, pointing out that teams of devel- 
opers will be able to reuse components and place 
them into applications, rather than having to rewrite 
existing code. “The whole philosophy of Web 
services is based on reuse,” Blechar says. “Clients, 
supply chain partners and people inside the 
organization will be able to reuse components.” 

Wanzek of American Equity agrees. “As XML 
becomes more of a common tool,” he says, “it will 
allow us to provide quicker and more reusable 
application development.” D 





Violino is a freelance writer in Massapeque Park, N.Y. 
Special projects editor Ellen Fanning contributed 
to this article. 
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A former CIO discusses “what Web services can do for business intelligence:” 
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Top Five 
Perceived Benefits 


What benefits do you expect to see 
from adoption of Web services 
applications? 


- Improved connectivity 20% 
MBétié: systems integration 20% 


Base: Survey of 262 global executives 
(75% were ClOs), who provided unaided 
responses; multiple responses allowed 


CENTURE LTD., APRIL 2003 


Implementation Stages 


At what stage of implementation are 
you with Web services technologies? 


Rollout 


Completed under way 


project 


Piloting 


No plans/ : 
don't know 


Base: Telephone survey of 877 IT decision- 
makers at North American companies 


Reasenasaisnaisies 


Considering 


SOURCE: FORRESTER RESEARCH IN 
AMBRIDGE. MASS., FEBRUARY 2003 


Top Seven Applications 


The most common Web services appli- 
cations currently being implemented: 


- Supply chain 33% 
“Rilowiedgehnanagement 32% 
Thletialfinance 25% 

- Data stofage 24% 


SOURCE. ACCENTURE LTD., APRIL 2003 
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MARK HALL 


Web Services’ 
sharp Edge 


EB SERVICES AREN’T SLICED BREAD, nor are they the best things since. 
They’re just sharper knives in your IT kitchen. And as with sharp knives, 
you have to be careful not to hurt yourself with them. 
Web services give you a higher level of abstraction than an application 
server or middleware, such as CORBA. That abstraction makes it easier 
for software developers to program relationships among disparate systems, because 
Web services offer a broader (but far from complete, mind you) set of standards. 


Web services are the ideal tool for tying creaky but 
essential mainframe software to your spunkier e-com- 
merce applications. One integrator told me that 25% of 
his company’s integration work is based on Web ser- 
vices, and that percentage is growing quickly. 

No wonder. Web services make things so easy. 
Just output everything in XML, and you're halfway 
home, right? 

Sorry. Not quite. 

What XML format is your application 

asking for again? CXML, the Commerce 
XML? Would that be Version 1.0, 1.1 or 1.2? 
Or was that CML, the Chemical Markup 
Language? Maybe it was BPML? eXML? 
Or my personal favorite, YML, the Why 
Markup Language? 

If you’re using Web services, you still 


ns 


need to be keenly aware of the format of the FRAMES 


services you intend to consume or share 
within applications. You can’t simply grab 
the data and assume that the format makes 
sense for your purposes. XML is good, but 
it’s not that good. 

Mark Pezel, a senior management consultant at 
TUSC, a software consultancy in Lombard, IIl., elo- 
quently summed up XML to me last month: “It’s intel- 
ligent ASCII.” Very cool. But not sliced bread. 

In addition to the complex XML formats developers 
face, IT operations are forced to wrestle with the major 
problem of Web services management. As Web services 
proliferate and become easier to build and deploy, their 
application dependencies, their requirements for quali- 
ty of service and service-level agreements, and their 
performance management will fall on IT’s shoulders. 

If you don’t control the source of the service your 
application needs in order to be fully functional, how 
can you possibly make promises about quality of ser- 
vice or service-level agreements? 

Well, you can’t without ironclad agreements with 
your Web services provider. That’s not impossible; it’s 
just another item on your to-do list. 


f a Security is another potential problem. 
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To further aggravate the management problem, 
there are no Web services management standards — 
only fledgling products and no best-practices track 
record to fall back on. You’re on your own. 

Then there are the vendors, which are the primary 
drivers behind the Web services movement. They’ve 
already begun to squabble publicly about how far to 
push Web services standards. Most of the 
smaller companies involved are in agree- 
ment that more standards are necessary; 
the bigger ones less so, just like with every 
other vendor-driven standards process, 
from 802.11 to database adapters. 


Although I’ve been assured that Web ser- 

vices security has been well designed, we 
coe really don’t know yet because there are no 

ru significant Web services-based applica- 

tions being used outside corporate fire- 
walls. Once that happens and the crackers 
(virtually) get their grubby fingers on 
them, we'll see how strong the security 
really is. The fact that Web services are, to date, a be- 
hind-the-firewall technology speaks volumes on IT’s 
wise reluctance to let them loose on the Internet be- 
fore wider testing and deployment. 

All that skepticism aside, I think Web services are a 
huge step in the direction of IT standards that will 
help eliminate information islands or silos (choose 
your favorite metaphor). They follow in the honorable 
tradition of Ethernet, ODBC, Java and other technolo- 
gies that bridge the natural differences among com- 
puting systems. When these other standard technolo- 
gies emerged, it didn’t mean IT managers could sit 
back with a cold one in hand and ignore networking, 
database or application-integration problems. They 
just solved them with different, more advanced tools. 

And that’s all Web services are or ever will be: 
another tool for you to help users sail out to those 
islands or knock down those silos. Just don’t cut 
yourself with them. D 
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virtually eliminates Microsoft Exchange downtime. Is your CEO happy? 


Viale: Set: 


VERITAS 





he 


secon KNOWLEDGE CENTER DEVELOPMENT = 


‘These pioneers are 
using Web services 


to make valuable 
connections with 
customers, part- 
ners and suppliers. 
Here’s what they’ve 
learned out on 

the bleeding edge. 
By Preston Gralla 


EB SERVICES may be the latest hot topic 
of conversation, but for many compa- 
| nies, that’s all the technology amounts 
to — talk. Not so for four pioneering 
companies where Web services are al- 
ready in operation and paying big dividends. We ' 
| talked with IT managers at these organizations about 
| how they’ve learned to exploit the technology by 
reusing Web service modules and better integrating 
their own internal business processes with those of 
external partners. 
| 
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Bank Cuts Production Time, 

Speeds Payment Delivery 

For years, Wells Fargo & Co.’s wholesale banking op- 
erations dealt with a polyglot of methods for han- 
dling wire transfers and interbank electronic pay- 
ments for its 100 largest corporate customers. Those 
customers sent payment instructions in formats such 
as EDI, flat files and XML, which forced Wells Fargo 
to build separate channels to tie each customer’s data 
into the bank’s back-end systems. 

No longer. The banking giant’s ePayment Manager 
Web services module now examines and parses pay- 
ment data in a wide variety of formats and sends it to 
Wells Fargo’s back-end systems, where payments are 
processed and customer acknowledgments are sent. 

Rather than build a custom setup for each cus- 

6 | tomer, existing Web service modules are snapped to- 








gether in Lego-like fashion. “Using Web services re- 
duces [account setup] times by 30% to 50% for each 
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new customer we add,” says Steve Ellis, executive 
vice president of the Wells Fargo wholesale services 
group in San Francisco. The bank saves development 
time and money, and customers don’t have to spend 
time and money altering their data formats. 

The bank started work in April 2002, and the sys- 
tem was in operation by November of that year. 


LESSONS LEARNED: Ellis’ advice for others looking to 
build Web services has nothing to do with technolo- 
gy and everything to do with management. “We 
make the technology and the business people sit to- 
gether so they understand one another before we be- 
gin,” he says. “That’s the most important thing you 
can do. You need the business people to ‘get’ IT, and 
the IT people to ‘get’ business.” 


VENDOR AND TOOL: webMethods Inc.’s webMethods 
Integration Platform. 


Retailer Integrates With Business 

Partners, Cuts Telecommunications Costs 

At Things Remembered Inc., the largest personalized 
gift retailer in the U.S., Web services are helping to 
speed up deliveries to customers. Before the Web 
services technology was in place, when a customer 
ordered a monogrammed vase from Things Remem- 
bered’s online partner 1-800-Flowers.com Inc., the 
Highland Heights, Ohio-based gift retailer had to pull 
that order manually from the florist’s Web site. That 
process took time and didn’t tie the order into 
Things Remembered’s real-time inventory system. 
To solve the problem, parent company Cole National 
Corp. in Mayfield Heights, Ohio, built a Web services 
module that directly ties the 1-800-Flowers.com site 
to the Things Remembered order-entry systems. 

Now that the company has built a basic tool kit of 
Web services objects, it will reuse them as part of a 
larger Web services initiative, says Mark Fodor, di- 
rector of e-business at Cole National. That initiative 
will include integrating with other online business 
partners, he says. 

In addition, Web services will eventually be used 
at point-of-sale systems in the 760 Things Remem- 
bered retail stores, says Fodor. Currently, managers 
must dial into the Cole internal network to check on 
inventory. The stores also connect to the Internet 
through an Internet service provider. But because a 
Web services application has already been built that 
ties into the inventory system, the Internet connec- 
tions will eventually be used to check on inventory. 
That will save telecommunications costs and reduce 
the time it takes to confirm customer orders, he says. 


Cee eee recesesersseseseeesesseseses 


LESSONS LEARNED: The key to developing a Web ser- 
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vices application, Fodor says, “is to make whatever 
you build reusable, so that you can plug it in for oth- 
er purposes. We built ours with that mind-set, and 
it’s paying off.” 


VENDOR AND TOOL: IBM’s WebSphere. 


eee eereeeesere 


Health System 

Access to Pate Information 

With an enormous amount of data and disparate 
computing systems, the health care industry is a nat- 
ural fit for Web services. Providence Health System, 
a $3.3 billion health care provider in Seattle, is a case 
in point. It uses Web services for enterprise applica- 
tion integration and to build small CRM systems. As 
a result, Providence cut its development costs, de- 
creased the amount of time it takes to bring a new 
service for customers to market by 30% to 50% and 
now provides patients and health care workers im- 
mediate access to patient information. 

Mike Reagin, Providence’s director of research and 
development, says the company “is very distributed, 
and so we have many in-house legacy systems, from 
old Mumps systems to new Microsoft ones, and we 
needed a consistent way of aggregating data from all 
of them.” 

The company started development work on Web 
services last spring and had its first module working 
within four weeks — a far faster turnaround time 
than for projects using other types of technology, 
Reagin says. Patients can now look up benefits infor- 
mation online and use a portal for transactions. Prov- 
idence has relationships with WebMD.com and 
Wellmed.com, so when patients log onto those Web 
sites, all their personal information (height, weight, 
date of birth) is already populated via Web services 
modules that link to Providence’s back-end systems. 

Similarly, doctors can connect to a portal that ag- 


gregates patient information from all of Providence’s 
< We make the technology 
and the business people 
sit together so they understand 
one another before we begin. 
That’s the most important thing 
you can do. You need the busi- 


ness people to ‘get’ IT, and the 
IT people to ‘get’ business. 


SOOO O POOH EEO H EEE SESE SEES EH ESET ESTES EES OEEEEES 


STEVE ELLIS, EXECUTIVE VICE PRESIDENT, 
WHOLESALE SERVICES, WELLS FARGO 


in Action 





| clinics, hospitals and offices. The portal “improves 
| clinical care and patient care, and hopefully reduces 
| costs and increases efficiencies,” Reagin says. 


LESSONS LEARNED: Reagin recommends getting the 
right tool set and management platform in place be- 
fore launching. “Going into development we were 
worried, ‘What if we have a hundred Web services 


| out there, how would we manage them all? Would it 


get chaotic?’ ” he says. By first choosing a platform, 
he says he’s been able to keep track of all the Web 


| services modules and reuse existing ones. 


| VENDOR AND TOOL: Infravio Inc.'s Web Services Man- 


agement System. 


Student Clearinghouse 
Benefits From Immediate RO! 


The National Student Clearinghouse (NSC) has de- 
| veloped Web services that significantly cut the time 





it takes for employers, loan providers and others to 
verify that job applicants hold degrees from the col- 
leges they claim to have attended. The Herndon, Va.- 
based nonprofit association expects to pay back the 
entire cost of its Web services development in a sin- 


| gle month. 


The NSC maintains a database of student records 


| from more than 2,700 schools and verifies student 


records for a fee. Its database is accessed more than 
100 million times annually, mostly by large screening 
firms, says Mark Jones, NSC’s vice president of mar- 
keting and business development. 

The problem had been that those screening firms 
didn’t have direct access to the NSC database and 


| would open a record in their own databases and call 


the school directly with a verification request in- 
stead of going through the NSC. If they did contact 


| the NSC directly, they had to call on the phone and 
ask staff members to verify the information, an ex- 
| pensive and labor-intensive process. 


The solution? NSC built a Web services applica- 
tion that ties screening company databases directly 
into the NSC database. Jones estimates that develop- 


| ment costs were $25,000, which can be recouped in 


one month in increased revenue and lowered costs. 


LESSONS LEARNED: Jones’ advice concerns business 
practices, not technology. “What surprised me the 
most is that there really haven’t been technical issues 
— the technology itself is almost trivial,” he says. 
“Most important is to make sure that the business 
model is right — make clear why you should do this 
with a trading partner, and calculate your ROI ahead 
of time.” 


VENDOR AND TOOL: Flamenco Networks Inc.’s Web 
Services Management software. B 





| Gralla is a freelance writer in Cambridge, Mass. 


Contact him at preston@gralla.com. 





LITTLE FISH, BIG POND 


A 12-person company uses Web services to launch e-commerce 
applications and gain an edge in the mammoth health care industry: 
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Web Services 


Here's an executive guide 
that explains XML, SOAP 
and Web services — in plain 
English. By Frank P. Coyle 


Information Technology Series A 
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HE WEB AND XML HAVE 

changed our perspective 

about what data can do. In- 

stead of regarding data as 

something to be stored in a 
database and shuttled across existing 
networks by systems locked in a tight 
embrace, the XML family of standards 
allows data to move freely about the 
loosely coupled Web and create new 
business opportunities. 

XML is a meta-language (literally a 
language about languages) defined by 
the World Wide Web Consortium 
(W3C), one of the main organizations 
driving the push to open Web stan- 
dards. In its simplest sense, XML is a 
set of rules and guidelines for 
describing structured data in 
plain text rather than in pro- 
prietary binary representa- 
tions. However, as a phenome- 
non, XML goes beyond its technical 
specification. Since its standardization 
by the W3C in 1998, XML has been the 
driving force behind numerous other 
standards and vocabularies that are 
forging a fundamental change in the 
software world. 

In XML’s short history, its influence 
has been felt in three waves, from in- 
dustry-specific vocabularies, to hori- 
zontal industry applications, to proto- 
cols that describe how businesses can 
exchange data across the Web. One of 
the key developments has been SOAP, 
the protocol that has opened the Web 
to program-to-program communica- 
tion and is the basis for Web services. 


The XML Advantage 


XML has had an impact across a broad 
range of areas. Why? 

®@ XML files are human-readable. 
XML was designed as text so that, in 
the worst case, someone can always 
read it to figure out the content. This 
isn’t the case with binary data formats. 

@ Widespread industry support ex- 
ists for XML. Numerous tools and util- 
ities are being provided with Web 
browsers, databases and operating sys- 
tems, making it easier and less expen- 
sive for small and medium-size organi- 
zations to import and export data in 
XML format. 








@ Major relational databases now 
have the native capability to read and 
generate XML data. 

@ A large family of XML support 
technologies is available for the inter- 
pretation and transformation of XML 
data for Web page display and report 
generation. 

XML’s capability to work with other 
technologies has opened up new possi- 
bilities for exchanging business infor- 
mation across the Web, essentially cre- 
ating an extended enterprise. One as- 
pect of this new extended enterprise is 
the emergence of Web services. For 
some, Web services represent the next 
evolutionary step for the Web, extend- 

ing it from a network that pro- 
vides services to humans to 
one that provides services to 
software looking to connect 
with other software. Web ser- 
vices is an ambitious initiative that is 
moving the Web to new levels of soft- 
ware-to-software interaction while try- 
ing to fulfill object technology’s 
promise of reusable components. 


Web Services 101 


Web services rely on several key under- 
lying technologies, in particular Uni- 
versal Description, Discovery and Inte- 
gration (UDDI); Web Services Descrip- 
tion Language (WSDL); and SOAP. 

® UDDI is a protocol for describing 
Web services components that allows 
businesses to register with an Internet 
directory so they can advertise their 
services and so companies can find 
one another and carry out transactions 
over the Web. 

@ WSDL is an XML format for de- 
scribing how one software system can 
connect and utilize the services of an- 
other software system over the Inter- 
net. It supports Web-based computing 
services that target computer pro- 
grams rather than human users. 

@ SOAP is the XML glue that lets 
clients and providers talk to each other 
and exchange XML data. SOAP builds 
on XML and common Web protocols 
(HTTP, File Transfer Protocol and 
Simple Mail Transfer Protocol) to en- 
able communication across the Web. 
SOAP brings to the table a set of rules 
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for moving data, either directly in a 
point-to-point fashion or by sending 
the data through a message queue 
intermediary. 

One of the main implications of 
SOAP is a change in how we think 
about distributed computing. Prior 
to SOAP, there were three basic op- 
tions for doing distributed computing: 
Microsoft Corp.’s Distributed Compo- 
nent Object Model, Java’s Remote 
Method Invocation or Object Manage- 
ment Group Inc.’s Common Object Re- 
quest Broker Architecture. These tech- 
nologies are still in widespread use. 
Their drawback is that they limit the 
potential reach of the enterprise to 
servers that share the same object in- 
frastructure. With SOAP, however, the 
potential space of interconnection is 
the entire Web, which is why there is 
such intense interest in technologies 
that can leverage the power of SOAP. 
One of these technology efforts is 
Web services. 

The Web services framework is both 
a process and a set of protocols for 
finding and connecting to software ex- 
posed as services over the Web. By as- 
suming a SOAP foundation, Web ser- 
vices can concentrate on what data to 
exchange instead of worrying about 
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how to get it from Point A to Point B, 
which is the job of SOAP. To make 
things even easier, SOAP also defines 
an XML envelope to carry XML anda 
convention for doing remote proce- 
dure calls so a service can advertise 
“call me here,” and a program will be 
able to do so without concern for lan- 
guage or platform. 

A Web service can be anything, from 
a movie review service to a real-time 
weather advisory to an entire hotel- 
and airline-booking package. The Web 
services infrastructure ensures that 
even services from different vendors 
will interoperate to create a complete 
business process. Web services take 
the object-oriented vision of assem- 
bling software from component build- 
ing blocks to the next level. With Web 
services, however, the emphasis ison | 
the assembly of services, which may or 
may not be built on object technology. 

Web services represent an industry- 
wide response to the need for a flexible 
and efficient business-collaboration en- 
vironment. Technically, it’s a way to 
link loosely coupled systems without 
binding them to a particular program- 
ming language, component model or 
platform. Practically, it represents a dis- 





crete business process with supporting 


protocols that functions by describing 
and exposing itself to users of the Web 
and being invoked by a remote user and 
returning a response. It includes: 

® Describing: A Web services applica- 
tion describes its functionality and at- 
tributes so that other applications can 
figure out how to use it. 

@ Exposing: Web services register 
with a repository that contains a 
“white pages” holding basic service- 
provider information; a “yellow pages” 
listing services by category; and a 
“green pages” describing how to con- 
nect and use the services. 

@ Being invoked: When a Web service 
has been located, a remote application 
can invoke the service. 

@ Returning a response: When a ser- 
vice has been invoked, results are re- 
turned to the requesting application. 

The driving force behind Web ser- 
vices is the desire to allow businesses 
to use the Internet to publish, discover 
and aggregate other Web services us- 
ing the global underpinning of SOAP. 
The fact that the delivery of Web ser- 
vices requires only the Internet means 


ject systems can plug into Web ser- 
vices frameworks. 


Opportunity and Risk 
Web services represent a new model 
of software distribution and intercon- 


nection based on the notion of services | 


globally available over the Web rather 
than object-to-object connections over 
limited networks. Because of the glob- 


al scope of Web-based services, the po- 


tential financial upside is extremely at- 
tractive. Financial incentives include 
new revenue opportunities through 


seen tee se ps 
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| creation of private trading networks, 


increased revenue through expanded 


distribution channels, and reduced in- 


ventory and transaction costs. 
Web services also promise improved 


| collaboration with customers, partners 
| and suppliers. They provide opportu- 

| nities for reducing integration time 

| and expense compared with existing 


enterprise application integration ap- 


| proaches. There is also opportunity for 
| improved supply-chain efficiencies; 


quick response to changing market 
conditions and customer preferences 


by utilizing loosely coupled modular 
services; and improved customer ser- 


vice by allowing customers and trad- 


| ing partners access to core systems. 


However, the Web services vision is 


| still new and not without risk. Despite 


the significant potential, it remains to 
be seen how Web services will play out 


| ona large scale. It’s expected that Web 
services will begin to play a role in the 
| delivery of simple services, but until 

| the technology matures, complex trad- 
| ing-partner interactions will still re- 

| quire an upfront human element to 
that legacy code and data as well as ob- | 


solidify agreements. D 


| Adapted, with permission, from the book 
| XML, Web Services, and the Data Revo- 
| lution, by Frank P. Coyle (Addison- 


Wesley, 2002). Coyle is director of the 
software engineering program at South- 
ern Methodist University in Dallas. 


XML BASICS 


A brief excerpt of Frank Coyle’s book points out that 
XML has been successful because it was designed to 
do only one thing and do it well 
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Web Services = Repository + Client + Provider 


Web services provide a way for clients to discover 
and connect to Web-based software services. 
There are three major aspects to Web services: 


Firewall 


@ A service provider provides an interface for 
software that can carry out a specified set of tasks. Corporate 


network 


Corporate 
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Testing Is Key 
To Success 


Highly automated Web services must work flawlessly, or they'll 


cause a chain reaction of business errors. By Mark Leon 


~ . f . a 
‘Testing Advice 
Don’t waste the work you put into testing 
by using it only once. Think about how testing 
routines can be reused for monitoring your Web 
services after they're deployed. 


« Don’t look at Web services testing as a 
one-shot deal. Testing needs to be iterative. 


Test frequently under a variety of con- 
ditions. 
« Testing Web services inside the firewall (for 
enterprise application integration, for example) 
requires knowledge of SOAP and WSDL but isn’t 
that different from testing more traditional applica- 
tions. There are tools available to help you do this. 


Testing Web services that use UDDI to find 
and bind to other Web services outside your 
company is a more complex undertaking and will 
probably require special expertise, customized 
testing tools or consulting help. 


FREDERIQUE BERTRAND 








EB SERVICES — those loosely coupled, 

machine-to-machine transactions — 

have to work error-free, without hu- 

man intervention, to achieve their 

much-heralded efficiency benefits. It 
takes only one software error to turn a Web services 
application into a disaster. 

“The automation of Web services is definitely a two- 
edged sword,” says Joshua Greenbaum, an analyst at 
Enterprise Applications Consulting in Daly City, Calif. 
“There is the potential for a cascade effect. Imagine a 
faulty transaction linked to a complex supply chain, 
and consider the speed in which errors can propagate.” 

Therefore testing, which is always important, is 
even more critical for Web services. 

There’s already a new breed of Web services test- 
ing tools available from vendors such as Mercury Inter- 
active Corp., Parasoft Corp., Empirix Inc. and Cape 
Clear Software Inc. Most are able to read Web Ser- 
vices Description Language (WSDL) files, which is 
usually the first step on the road to testing. 


Venturing Outside 

Testing Web services inside the firewall — for appli- 
cation integration projects, for example — isn’t much 
different from testing traditional applications. But 
Web services that reach outside the firewall raise 
new testing issues. 

Insurance company MetLife Inc., for example, uses 
Web services to connect dental providers and employ- 
ers. But “with loosely coupled applications, you don’t 
even know where all the pieces reside,” says James 
August, vice president and chief architect for the insti- 
tutional portfolio at MetLife in New York. 

August worked with BearingPoint Inc. consultants 
to design testing processes for the new Web services 
applications. He says it would be nice to have more 
testing tools, but the market is still immature. “What 
we are after,” he says, “is good regression testing that 
we can apply bottom-up and top-down.” Regression 
testing selectively retests software that has been modi- 
fied to ensure that bugs have been fixed and that no 
new problems have been inadvertently added. Bottom- 
up testing checks individual components, whereas top- 
down testing checks the entire set of applications. 

Measured Progress Inc., an educational testing 
firm in Dover, N.H., uses software from Waltham, 
Mass.-based Empirix to help test a highly distributed 
Web services application. Web services link the com- 
pany’s .Net platform to various school testing sys- 
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tems across several states. Edmund Ashley, manager 
of software development at the company, says Web 
services ease the integration headaches but also in- 
troduce new levels of testing complexity. 

The fact that Web services are good at linking a 
hodgepodge of systems also means that they deliver 
a more unpredictable stream of data across the com- 
pany’s network. “We need to be aware of the blend of 
data coming in,” says Ashley. “Empirix helps us test 
mixes of SOAP and HTTP [data], for example. Un- 
derstanding how this affects the system is critical, es- 
pecially as our loads increase.” 

Loads that can increase unpredictably will be one 
of the biggest testing challenges for Web services 
that link servers to external clients, says Adam Ko- 
lawa, CEO and founder of Parasoft in Monrovia, 
Calif. And, Kolawa continues, “it will be more impor- 
tant than ever to test for the unexpected.” 

“We call it ‘monkey testing,’ ” he explains. “You 
want to throw weird requests at the server and see 
how it behaves.” 


MIB to the Rescue? 

So far, there isn’t much use of the UDDI Web direc- 
tory standard, except in pilot projects, says Alejandro 
Danylyszyn, senior manager of technology integra- 
tion at Deloitte Consulting in New York. But even in 
the pilot phase, UDDI deployments will probably re- 
quire more than a window into WSDL for testing. 

Benjamin Sherman, a senior consultant at Green- 
wich Technology Partners Inc. in Harris, N-Y., says 
tools that allow developers to see how components 
in a Web service are performing aren’t widely avail- 
able. Sherman says he’s alarmed that “IT shops have 
no way to test Web services applications with com- 
plex dependencies, so they are forced to just throw 
them over the wall and see how they do.” 

But, he adds, improvements are on the way. The 
Internet Engineering Task Force has proposed an ap- 
plication performance management Management In- 
formation Base, or APM MIB. (MIBs have been 
around for a long time in network operations. 
They’re standardized databases that allow remote 
management and testing of IT devices.) Sherman 
says a Web services MIB would provide standard 
metrics on any Web services component. 

Not everyone agrees that a new MIB is the way to 
go. Ido Sarig, vice president of technology strategy at 
Mercury Interactive in Sunnyvale, Calif., says he 
thinks the same testing and management functions 
can be added to future versions of WSDL. 

In any case, users are pressing ahead with existing 
tools, even though the tools are still evolving and 
there isn’t yet agreement on standards for Web ser- 
vices testing. Experts say that despite the uncertainty 
in this young market, IT managers should have an 
aggressive plan for testing Web services applications 
if they expect them to be successful. D 


Leon is a freelance writer in San Francisco. 
Contact him at mrleon@usfca.edu. 


TESTING IN AN ORGANIC WORLD 


Testing Web services can enable new functionality, as well as new levels of 
quality and reliability, writes columnist Linda Hayes: 
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Introducing the Integrated Composite Application Network (ICAN) Suite 5.0 
from SeeBeyond. ICAN provides unprecedented support for open standards such as 
J2EE and Web services. And it is.a comprehensive platform that lets you quickly create 
new. end-user business applications by assembling business logic and functionality 
from the information systems you already have. With ICAN 5.0, your IT strategy can 
finally keep up with your business strategy. To find out how, contact us TODAY. 
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“Amazing Grace’ Would 
Be Happy to Hear This 


The Cobol programming language, de- 
veloped in 1959 and based on earlier 
work by Rear Adm. Grace Hopper, 
seems to have a future even in the 
newfangled world of Web services. 
The keeper of the flame is Micro Focus 
International Ltd., which last week an- 
nounced the first product enabling 
Cobol code to be deployed directly as a 
Web service without requiring third- 
party software. 

The vast majority of the world’s busi- 
ness applications are still written in 
older languages like Cobol. “For most 
banking and insurance companies, 
those [Cobol] systems are their busi- 
ness and their differentiation from the 
competition, and they’re not about to 
throw them out,” says Ian Archbell, vice 
president of product management in 
Micro Focus’ Sunnyvale, Calif., office. 

So Archbell says Micro Focus is gear- 
ing up to help companies unlock their 
existing software assets and “tie togeth- 
er the traditional world and the new 
world.” He says Micro Focus is invest- 
ing 20% of its revenue in R&D to cover 
three areas: making sure that Cobol is a 
“first-class citizen” when Web services 
are used to integrate applications, that 
Cobol and Java interoperate, and that 
XML support is provided. 





’ Mitch Betts 


The Language 
Popularity Index 


The monthly Tiobe Programming 
Community Index shows the populari- 
ty of programming languages, based on 
hits at the Google search engine. It’s a 
rating that roughly indicates the world- 
wide availability of skilled engineers, 
courses and third-party vendors for 
each language, the index creator says. 
Caution: The index doesn’t say which 
is the best language, and it isn’t based 
on the lines of code written. 

LANGUAGE RATING 


Java 51.2 
C 37.4 
C+ 32.8 
Perl 18.7 
Visual Basic 17.2 
PHP 9.4 
JavaScript 6.8 
« SQL 5.5 
C# 3.9 
Delphi/Pascal/Kylix 2.2 
Python 21 
Cobol 2.0 
RPG 1.9 
Fortran 1.8 

« Lisp 1.5 
Ada 1.3 
For methodology: www.tiobe.com/tpci.htm 


SOURCE: TIOBE SOFTWARE BV, THE NETHERLANDS, MAY 2003 





Businesses Can Capture 
The Open-Source ‘Magic’ 
Corporate application-development 
shops can learn something from the 
open-source movement, says Bill 
Portelli, CEO of CollabNet Inc. in Bris- 
bane, Calif. “What was the magic that 
made Apache and Linux work, in the 
absence of a company? It was a collab- 
orative development process that in- 
cludes early involvement of all of the 











stakeholders. And we've tried to bottle 
that magic,” he says. CollabNet offers 
Web-based tools for collaborative soft- 
ware development that attempt to 
mimic the open-source world. (The 
company’s founder, Brian Behlendorf, 
was co-founder of The Apache Soft- 
ware Foundation.) 

Portelli says CollabNet tools let pro- 
grammers, systems integrators and 
end users work together in real time — 
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even from far-flung locations — cut- 
ting 25% to 50% off development time. 
But is it possible to have too much 
collaboration? “You can always have 
too much of a good thing, if it’s unman- 
aged,” Portelli says. “So you need to es- 
tablish access controls — you don’t 
want everyone able to make changes. 
Sometimes unfettered collaboration 
needs to be cut off.” In other words, in 
a corporate IT environment, he says, 
“you want a blend of the open-source 
practices and corporate practices.” D 


MORE RESOURCES 


Check out our Development Knowledge Center for 
news, opinion columns, events and tutorials: 
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Antarctic Data Center 
Uses ColdFusion 


ANTARCTICA - Storing and main- 
taining the mountains of scientific 
data that Australia’s Antarctic re- 
searchers generate isn't a job for the 
faint hearted, but that's the challenge 
the Australian Antarctic Division Data 
Centre has undertaken. 

The Australian Antarctic Treaty re- 
quires ali data, such as statistics on 
flora, fauna, weather and marine life, 
to be publicly available. So the data 
center has developed an online cen- 
tral repository - actually an intercon- 
nected collection of 30 databases - 
that can be queried on the Web. 

Based on Oracle Corp.'s database 
suite, the repository sits on a Sun 
Microsystems Inc. server running on 
Solaris 8. 

The database holds about 500GB 
of data. Linkages that cross-reference 
the data and allow queries across all 
of the databases were developed us- 
ing Macromedia Inc.'s ColdFusion 


Web application language. 

Recently, the center decided to 
also use ColdFusion for all of its front- 
end database development needs, 
says data center manager Lee Belbin. 

“(ColdFusion] is faster than PL/ 
SQL, which is what Oracle uses, and 
it's faster and more robust than Java,” 
he says. 

The latest version of ColdFusion 
MX includes Java support, allowing 
the database team to write applica- 
tions in the ColdFusion programming 
language but have them translated 
into Java, Belbin says. 

Future plans include a field-trip 
database system, which will allow 
members of expedition parties to 
post information about the condition 
of the various base stations, such as 
whether they need cleaning, repairs 
or more toilet paper. 

- Nadia Cameron, 
Computerworld Antarctica 
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lronic how it takes the cutting edge 
technology of 2003 to access the 
cutting edge technology of 1973. 


myEXTRA!™ Smart Connectors let you leverage your existing legacy data and logic. 


“Cutting edge” doesn’t cut it. You need products 
that do what they say they will do. This is what 
we say: Our myEXTRA! Smart Connectors give you 
XML-based Web services — they let you get at legacy 
information without changing host applications 
You can put all of the business data and applica- 
tions locked up in mainframes to new use in hours 
or days, not weeks or months. We've spent the last 
18 years making legacy data more useful. Smart 
Connectors are the logical next step, making data 
easier to get at. 


Find out more. Download our free White Paper 
“Leveraging Legacy Applications to Serve New 
Business Initiatives” at www.attachmate.com/SC7. 


attachmate 
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XACML 


DEFINITION 
Extensible Access Control Markup 
Language (XACML) is an XML- 
based language, or schema, 
designed specifically for creat- 
ing policies and automating 
their use to control access to 
disparate devices and applica- 
tions on a network. 


BY RUSSELL KAY 
AINTAINING secu- 
rity on their net- 
works is critical 
for all companies. 
One primary tool 

that every network needs is 

access control — the ability to 
carefully define and enforce 
which users have what type of 
access to specific applications, 
data and devices. 

When the network was con- 
tained within a single building 
or campus, the problem was 
relatively simple and generally 
handled by software that was 
hooked into the operating 
system. But today’s networks 
involve interconnected seg- 
ments distributed across the 


XACML in Use 


PEP determines 
whether access 
is authorized. © 


PEP 


A user (in XACML 
terms, a subject) re- 
quests data from a 
specific network re- 
source (a file system, 
server, database or 
Web service). 


The query goes to 
the entity protect- 
ing the resource 
(called a Policy 
Enforcement 
Point, or PEP). 





No 


country and around the globe, 
and many of these are also 


| joined to the public Internet. 


The growing use of XML as 
the common mechanism for 
exchanging data makes it sim- 
pler and easier to find and use 
data from external sources. 
Applications can call 
upon automated, re- 
motely based Web ser- 
vices to add new capa- 
bilities. But who’s in 
charge? Access control 
has become harder to 


more important than ever. 
One answer lies with two 


specialized variants of XML — 
| Security Assertions Markup 


Language (SAML) and 


If No Match, 
it denies user 
access. 


Fleet a 


(ir 
: XACML 
TW 


The PEP uses the XACML 
request language to cre- 
ate a request based on 
the attributes of the sub- 
ject, action, resource and 
other relevant information. 


ncscaoneaetinlanciniionems 


UICKs, 


Existing 


policies 
PDP 


The PEP sends this re- 
quest to a Policy Deci- 
sion Point (PDP). 


XACML. SAML defines how 
identity and access informa- 
tion is exchanged and lets or- 
ganizations convey security 

| information to one another 
without having to change their 
own internal security archi- 
tectures [QuickLink 32137]. 
But SAML can only communi- 
cate information. How to use 
that information is where 
XACML comes in. 

The language, which uses 
the same definitions of sub- 
jects and actions as SAML, of- 
fers a vocabulary for express- 
ing the rules needed to define 
an organization’s security 
policies and make authoriza- 
tion decisions. XACML has 
two basic components. 

The first is an access-con- 
trol policy language that lets 
developers specify the rules 
about who can do what and 
when. The other is a request/ 
response language that pre- 
sents requests for access and 
describes the answers to those 
queries. 

XACML provides for fine- 
grained control of activities 
(such as read, write, copy, 
delete) based on sev- 
eral criteria, including 
the following: 

® Attributes of the 
user requesting access 
(e.g., “Only division 
managers and above 





UDY" 


| manage at the very time it’s can view this document.”) 


@ The protocol over which 
the request is made (e.g., 
“This data can be viewed only 
if it is accessed over HTTPS.”) 

@ The authentication mech- 


If Match, it per- 
mits access by 


the user. The answer (Match or 


No Match) goes back 
to the PEP. 


o 
The PDP retrieves 


GR applicable policies 
(written in XACML). 


Request 
ari) 
policy 


The PDP compares 
the request against 
policies and deter- 
mines whether ac- 
cess should be 
granted. 


SOURCE: SUN MICROSYSTEMS INC 





anism (e.g., “The requester 
must have been authenticated 
using a digital device.”) 


Strengths 

XACML was designed to re- 
place existing, usually applica- 
tion-specific, proprietary ac- 
cess-control mechanisms. Pri- 
or to the new language, every 
application vendor had to cre- 
ate its own custom method for 
specifying access control, and 
these typically couldn’t talk to 
one another. The first imple- 
mentation of XACML was 
created by Sun Microsystems 
Inc. in Java and is available at 
http:/4unxacml.sourceforge.net. 
According to Sun, XACML has 
a number of advantages over 
other access-control policy 
languages: 

® Security administrators 
can describe an access-control 
policy once, without having to 
rewrite it numerous times in 
different application-specific 
languages. 

@ Application developers 
don’t have to invent their own 
policy languages and write 
code to support them; they 
can reuse existing, standard- 
ized code. 

™ XACML is intended to be 
primarily a machine-generat- 
ed language. XACML creators 
expect that easy-to-use tools 
for writing and managing 
XACML policies will be devel- 
oped, since they can be used 
with many applications. 

@ XACML can accommo- 
date most access-control poli- 
cy needs and also support new 
requirements as they emerge. 

@ A single XACML policy 
can be applied to many re- 
sources. This helps avoid 
inconsistencies and elimi- 
nates duplication of effort in 
creating policies for different 
resources. 

@ With XACML, one policy 
can refer to another. In a large 
organization, for instance, a 
policy for a specific site might 
reference both a company- 
wide policy and a country- 
specific policy. 


History 

XACML was developed by a 
team that included peopie 
from Entrust Inc., IBM, Open- 
Networks.org, Quadrasis Inc., 
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An XACML 
Glossary 


ACTION: The type of access 
that is being requested (for 
example, read, write, create, 
delete, logged). 
ATTRIBUTE: A specific charac- 
teristic of a subject, resource, 
action or environment in which 
the access request is made. 
Attributes could include a user's 
security clearance, the file to 
which access is desired and the 
time of day. 

BAG: An unordered collection of 
attributes, used for matching at- 
tributes to conditions. Bags may 
contain duplicate attributes or 
be empty. 
CONDITION: A simple or com- 
plex Boolean function at the 
heart of a rule. 
EFFECT: The result of an autho- 
rization: deny or permit. 
POLICY: A single access- 
control policy expressed through 
a set of rules. 
POLICY SET: A container of 
policies, including references to 
remote policies. 
RESOURCE: A device, data 
element or file for which access 
is requested. 
SUBJECT: The person or com- 
puter making a request. 
TARGET: A set of simplified con- 
ditions for the subject, resource 
and action that must be met for a 
policy set, policy or rule to apply 
to a given request. 


Sterling Commerce Inc., Sun 


| and BEA Systems Inc. 


In February, XACML was 
adopted as a standard by the 
Organization for the Advance- 
ment of Structured Informa- 
tion Standards. D 
Kay (russkay@charter.net) is a 
Computerworld contributing 
writer in Worcester, Mass. 


RESOURCE LINKS 


For a list of online resources related to 
XACML, visit our Web site: 


qd QuickLink 38387 

“« www.computerworld.com 

Are there technologies or issues you'd like 
to learn about in QuickStudy? Send your 
ideas to quickstudy@computerworld.com 


To find a complete archive of our 
QuickStudies, go online to 
@ computerworld.com/quickstudies 
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predicts strong demand for people familiar with Web services standards. 


It takes new specialist skills and 
old-fashioned programming to make it 
in Webservices. By Amy Helen Johnson 


F YOU DON’T KNOW what SOAP is, 
you could be missing out on one of 
the critical new trends in applica- 
tion development: building Web 
services. 

Knowledge of Simple Object Access 
Protocol and its extended family of pro- 
tocols, languages, frameworks and tool 
kits is necessary for IT professionals to 
create these code packages, which per- 
form real-time operations and exchange 
information over the Internet. 


| 
| 


“Five years from now, it’s definitely 
something that developers will want 
on their résumé,” says Brent Zempel, 


| CIO at Life Time Fitness Inc., a health 


and nutrition services company in 
Eden Prairie, Minn. “It will set them 
apart from other developers.” 


Skills 


Wesley Bertch, director of information 
systems at Life Time Fitness, says the 
company looks for candidates with 





| Falk says finding training programs 


| veloper on his nine-person team and 


knowledge of Web architectures, Inter- 
net technologies and Java 2 Enterprise 
Edition. Those developers are familiar 
with component-based applications, 
which are the foundation of Web ser- 
vices, he says. 

Key skills for building Web services 
interfaces include knowledge of XML 
and SOAP, Bertch says. Research from 
Stamford, Conn.-based Gartner Inc. 
adds to that list the J2EE and Microsoft 
.Net platforms, the Java and C# lan- 
guages and the Visual Basic .Net devel- 
opment environment. 

But these aren’t the core capabilities 
developers need in their portfolios, ac- 
cording to a recent Gartner report. 
Many Web services com- 
ponents will be legacy ap- 
plications wrapped in Web 
services interfaces. Pro- 
grammers still need a firm grounding | 
in established programming languages 
like C++, Cobol, Visual Basic and wide- 
ly used business applications like Ora- 
cle Forms and IBM’s CICS. 

That need for expertise in older 
business technologies was important 
when Swiss Interbank Clearing Ltd. 
was developing Web services, says 
Thomas Grutter, head of the IT depart- 
ment at the intrabank services pro- 
vider. The Zurich-based financial firm 
uses Cobol applications and newer 
client/server software based on object- 
oriented programming techniques. 
The diversity of the underlying pro- 
gramming languages meant that each 
Web services project required separate 
specialists familiar with the dissimilar 
technologies. 

In terms of skills, Web services pro- 
grammers are old-fashioned develop- 
ers with extra technical knowledge, 
says Doug Falk, CIO at National Stu- 
dent Clearinghouse. The Herndon, Va.- 
based nonprofit consortium of colleges 
and universities provides an electronic 
registry of current student and alumni 
records. “One of the things we learned 
along the way was that once you get 
over the terms and standards, it really 
comes back to developing basic appli- 
cations,” he says. 





Training 


that teach Web services technologies 
was pretty easy. He picked the top de- 


sent her to a three-day Java course of- 
fered by Sun Microsystems Inc. and a 
one-day SOAP class offered by Sys- 
Con Media Inc. in Montvale, N.J. Other 
team members engaged in informal 
self-education projects, using books 
and online materials to learn about 
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topics such as XML schemas. 

But experience trumps certifica- 
tions, says Gary Lien, a systems archi- 
tect at Life Time Fitness. “Having a 
certification doesn’t mean anything in 
terms of real-world experience dealing 
with distributed applications,” he says. 


Job Market 


There’s noticeable demand for Web 
services managers and programmers at 
companies around the world. For ex- 
ample, some recent job postings at 
Monster.com included openings at a 
TV entertainment company in Los An- 


| geles, a geographic information sys- 


tems data provider in Dublin and a 
telecommunications com- 
pany in Hong Kong. 

Swiss Interbank’s Grut- 
ter notes that companies 
have passed through the “new toy” 
phase of the emerging technology. The 
focus is now on writing production ap- 
plications. “Web services must be 
paired with a business need,” he says. 


Salary 


Although IT managers agree that de- 
mand for Web services programmers 
is rising, there’s no consensus on 
whether these skills translate into 
higher salaries, only that they’re “defi- 
nitely valuable,” says Zempel. 

The European market, says Grutter, 
won't necessarily pay bonuses to appli- 
cants who list Web services project ex- 
perience on their résumés, because un- 
employment has brought down 
salaries about 10% overall. 

But in the U.S., Falk places a 10% 
premium on hires with Web services 
experience. However, he says he 


| wouldn’t offer any more than that be- 


cause he places more weight on devel- 
opers’ core application programming 
skills than on knowledge of Web ser- 
vices. A transaction involves the Web 
services interface for only a short peri- 
od of time, he explains. Once the data 
is consumed by the business applica- 
tion, it turns into a normal transaction, 


| where established coding skills still 


mean the most, Falk says. 

“When you get down to it, you need 
someone with good skills at designing 
applications,” says Falk. D 





Johnson is a Computerworld contribut- 
ing writer. Contact her at amy-helen@ 
pobox.com. 


LOOKING FOR A WEB SERVICES JOB? 


Or for someone to fill an IT staff position? Check out 
Computerworla’s online careers page, where you can 
search for jobs, post a résumé, or list an opening: 


© www.computerworld.com/jobs 















See who's online in real-time. 
See knowledge shared in real-time 
See real-time teamwork at work. 


Lotus Instant Messaging}is the leader in instant messaging for business. Lotus software lets you know 
who's available, on demand. It creates real-time. virtual collaboration. on demand. It can create cost 
savings and quicker response time instantly. Everyone becomes more agile. Your communication is 


more secure. Business advantage is immediate. For a Lotus webcast, visit ibm.com/lotus/Seeit 
(© business on demand software 
















1 demand are registered trademarks or wademarks of international Business Machines 
d on resuits from the Osterman Study “Survey on Instant Messaging Issues’ (9 
an iM standard. ©) 2002 Osterman Researth, inc 
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KNOWLEDGE CENTER DEVELOPMENT 


The Next 
Chapter 


Predictions: U.S. programmers will 
be limited to sensitive, niche applica- 
tions, while the bulk of program- 
ming will be done offshore. And 
Web services will run amok. 


m@ ANGST-FREE MERGERS 
Within five years, Web services will 
become the de facto standard for deal- 
ing with systems consolidation follow- 
ing mergers and acquisitions. Web ser- 
vices have the potential to cut the time 
to consolidate business systems in half, 
thereby accelerating the expected re- 
turn from the merger or acquisition. 
With Web services, changes to or inte- 
gration of existing systems can be 
done in a more orderly fashion — 
without the user angst that usually 
occurs with postmerger consolidation. 
Norbert Kubilus, partner, Tatum CIO 
Partners LLP, San Diego 
@ MAINFRAME SECURITY 
One unpublicized challenge for Web 
services is security for the mainframe, 
where 70% of all corporate data re- 
sides. With the advent of Web services 


ment tools, cheaper labor and quality 
methodologies are making it more at- 
tractive to develop software overseas. 
The only software development that 
will be left in the U.S. will be for niche 
applications, new products and highly 
sensitive strategic applications. 

Jon C. Piot, chief operating officer, 
Impact Innovations Group LLC, Dallas 
@ B2B PHOENIX 
Industry-specific “Web services net- 
works” will rise from the ashes of the 
e-marketplaces of the dot-com era. 
They’ll be similar to the late, some- 
times lamented e-marketplaces, only 
better in just about every way. 

Ross Altman, director of consulting, 
Electronic Data Systems Corp. 
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@ DISRUPTIVE TECHNOLOGY 
Within three years, Web services will 
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drop and no longer impede business 
advances. 
2006: IT productivity in developing 
applications triples from the previous 
year, due to automated code genera- 
tion, reallocation of staff and consult- 
ing resources, and a laser focus by se- 
nior developers on the aspects of ap- 
plication development that are unique 
and mission-critical. 

Alan Fisher, chairman, Iron Speed Inc., 
Mountain View, Calif. 


@ DATA OVERLOAD 

There are two dirty little secrets about 
Web services. One, they’ll never be the 
Swiss Army Knife of the enterprise. In- 


| stead, they’ll be just one tool in the in- 


tegrator’s toolbox. Two, Web services’ 
power to make quick connections 
among myriad companies will open 
the data floodgates and dramatically 
increase the problem of information 
overload. As a result, data integration 
will top every CIO’s to-do list by 2005. 
= Bob Zurek, vice president of advanced 
technology, Ascential Software Corp., 
Westboro, Mass. 


@ DIVISION OF LABOR 
Over the next three to five years, IT 
departments will specialize more on 
developing Web services for specific 
functions such as accounting and 
billing, while business departments 
will take on development of Web ser- 
vices for actual applications such as 
order entry, inventory management or 
claims processing. 

Why? Because Web services tools 
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will become as simple as Microsoft 
Office tools are today. The high-level 
editor tools will evolve toward the 
orchestration of services and will be 
usable by knowledge workers. 

« Eric Newcomer, chief technology 
officer, Iona Technologies PLC, 
Waltham, Mass. 

w@ OUT OF CONTROL? 

By 2004, low-level concerns about 
security and interoperability of Web 
services will be replaced by high-level 
concerns about organizational control. 
Chief technology officers will be faced 
with a rising tide of Web services that 


| ° fei : 
are different in implementation and 


performance, have no central point 
of registry and begin to duplicate 
functionality. 

® Roman Stanek, CEO, Systinet Corp., 
Cambridge, Mass. 

i@ SELF-AWARE SOFTWARE 

Agents — software components with a 
sense of self — will replace Web ser- 
vices as the next layer of abstraction in 
software development. By 2006, agent 
software will be the dominant design 
principle for software development. 

® Charles Stack, CEO, Flashline Inc., 
Cleveland 


MORE PREDICTIONS 


Industry expert Grady Booch says that by 2007, 
software “will be developed and maintained through 
collaborative development environments consisting of 
thousands of moving parts that are never turned off.” 
6% QuickLink 38054 
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One Brick Wall, Please 


The future of application programming is the concept of goal-based 
methods. No longer will an application have simple requirements for 
objects or services, such as a “brick” or “bricklayer.” 


Future applications will call out specific require- 
ments such as a need for a “durable, quickly as- 
sembled wall.” The application will then go out 
and query the network for available resources 


have a highly disruptive impact on the 
software market. Vendors that are ei- 
ther unwilling or unable to componen- 


on the host, the mainframe is much 
more vulnerable to corruption from 
outside forces. As companies realize 


this, or as instances of mainframe se- 
curity breaches greatly increase, you'll 
see more companies roll out main- 
frame security measures before partic- 
ipating in Web services initiatives. 
Koen Bouwers, CEO, Consul Inc., 
Acton, Mass. 
@ THE ASTEROID HITS 
Software development in the U.S. will 
be extinct by mid-2006, with gradual 
job losses much like the U.S. textile in- 
dustry experienced in the last quarter 
of the 20th century. Better develop- 
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tize their applications in a flexible 
manner will see substantial losses of 
market share. Noncompliant applica- 
tions will be gradually marginalized 
by early 2005. 

Bernhard Borges, Distinguished Engi- 
neer, IBM Business Consulting Services 
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@ ONE MAN’S TIMELINE 

2003: Application development is sim- 
plified and becomes highly automated. 
2004: Software writes more lines of 
code than humans do. 

2005: Software maintenance costs 
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to accomplish such a task. 

— Steve Spencer, chief 
technology officer, Twelve 
Horses North America LLC, 
Salt Lake City 
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IT; Careers.com 


hen the Information Technology Association 

met earlier this month for the annual Workforce 

Convocation, there were two critical items for 
consideration — the state of the IT workforce and the report of a 
Blue Ribbon Panel on Diversity. 

In its annual survey of 400 hiring managers, ITAA found 

that the employment bounce back predicted a year ago didn't 
bounce. However, the same hiring managers say the downsizing era 
seems to be at an end. At year-end 2002, 10.2 million people were 
employed in IT in the United States - about even with employment 
figures for 2000. And just over 400,000 new jobs are planned for 
2003 — slow but steady growth compared to the exponential growth 
of the past. The key skills needed are in programming/software 
engineering, technical support to capitalize on new IT solutions 
and enterprise management implementation and improvement. 


Blue Ribbon Panel Report on Diversity 


Demographic representation by percentage of total IT professionals 


Source: ITAA 2003 


SYNAPSE GROUP, INC., a lead- UNIX ADMINISTRATOR. Support 
ing computerized magazine mar- UNIX system, including design, set- 
keting company, is looking to hire up, configuration, and administra- 
a qualified PROGRAMMER ANA tion. Administer SAN environment 


LYST, to plan, develop, test, doc- 
ument and update computer pro- 
grams to increase operating effi- 
ciency; to enter program codes 
into computer systems; to evalu- 
ate user requirements; and to 
monitor performance and provide 
technical assistance to program 
users. Qualified applicants are 
required to possess at least a 
Bachelors degree in Computer 
Science or it’s equivalent. Sound 
knowledge in internet applica 
tions, HTML, SQL, C++ , Oracle 
and Oracle Web server preferred 
The company offers a competitive 
compensation/benefit package 
and an environment where ach- 
ievements are recognized & pro- 
fessional growth is encouraged 
Qualified applicants are encour- 
aged to mail resumes to 
Department of Human Resources, 
Synapse Group, Inc., Four High 
Ridge Park, Stamford, CT 06905 


Programmer Analyst: Develop 
/impiement applications for elec- 
tronic document mgmt and data- 
base systems on Windows/ Unix 
platforms Will create cus- 
tomized imaging database file 
search applications using 
Oracle, MS/SQL Server, and 
Access 2000; develop web data- 
base data warehouse applica- 
tions using XML, JavaScript 
OLAP Services and DTS; per- 
form systems __ integration 
according to HIPAA impiementa- 
tion guides; and provide other 
technical support. Requires BS 
in Computer Science, EE or 
MIS. Full-time, competitive 
salary. Apply to: HR at QFlow 
Systems, LLC, 9317 
Manchester Rd., St. Louis, MO 
63119. No Calls. EOE 
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with EMC Storage and Brocade 
switches, using EMC Symmetrix 
and Clariion Storage products in a 
heterogeneous environment. Ad- 
minister effective backup and 
restore function, using Veritas 
NetBackup DataCenter. On-going 
technical support, troubleshooting 
performance management, capaci 
ty planning and Disaster recovery 
planning/testing. Requires: B.S 
Management Information Systems. 
Computer Science, or a related 
field; 4 years experience as UNIX 
System Administrator using HP 
9000 class servers and HP-UX 
10.2, 11.0 and 11i.; experience 
must include configuration and 
administration of EMC Symmetrix 
and Clariion FC-4700, Veritas 
NetBackup DataCenter and SAN 
with Brocade 3800 switches. Must 
have current authorization to be 
permanently employed in the 
United States. Send resume to 
Dawn Griffin, DRA, 2902 Enterprise 
Drive, Anderson, IN 46013. 


SENIOR SOFTWARE ENGI- 
NEER to provide on-site consul- 
tancy to design, develop, ana- 
lyze and test software systems 
for web design applications 
using Java, HTML, Java Script 
and CG/Perl; develop e-com- 
merce application systems using 
Java internet technologies such 
as Serviets, JSP, EJB, RMi and 
CORBA on Windows and Unix 
operating systems. Require 
M.S. in Computer Science 
/Electronics Engineering and 
two years experience in the job 
offered or as Programmer/ 
Analyst. 40 % travel to client 
sites within the United States 
Competitive salary and benefits, 
40 hours/week, M/F, 8 am to 5 
pm. Apply with resume to 
President, ObjectNet Tech- 
nologies, Inc., 1117 Perimeter 
Center West, Suite N402, 
Atlanta, GA 30338. 
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Diversity in JJ Careers 


Nine of 10 workers will support banks, insurance companies, 


manufacturing companies or other non-IT businesses 


In the midst of this maturing of the IT workforce, the ITAA 


also issued three priorities with regard to diversity. According to 


Bob Knowling, chairman of SimDesk Technologies and chairman of 


the ITAA panel, the Blue Ribbon Panel's priorities aren't “very pro 


vocative.” However, Knowling is challenging IT leaders and human 


resources professionals to take provocative action. “The only way 


| have ever seen a company change its face is through the will of 


the CEO and board,” says Knowling. “The rest of the work in this 


report is window dressing if there isn’t support and commitment at 


the top, including making sure you have charged executives with 


performance improvement in this particular area and link their pay 


to improvement 


“We - in this report — are on spot with the diagnoses and 


have to admit that these are merely practical 


steps,” adds Knowling. “There will be more than 
400,000 new jobs this year. We must have the 


dialogue that this is a business imperative. Left to 


our own devices, we fill the jobs around us with 


Women 
(non-administrative) 


people who look like us — it’s an orientation, not 


racism. But I’ve seen first-hand what can happen 


African-American 


Hispanic 


when the executive suite reflects that commit 
ment to diversity. The organization grows by 


leaps and bounds when women and people of 


Native American 


color show up.” 


The second priority in the report is to 


Asian 


increase corporate outreach and mentoring. To 


assist, the Blue Ribbon Panel issued a list of best- 


in-class examples. Specifically, the committee 


called for establishing professional forums that 


bring together diverse IT professionals and pro- 


Position opening for IT 
Professionals. Internet/Web 
Programmer Analysts, who must 
have M.S or B.S or equiv. In C/S 
or Eng’g (any branch) or Math or 
Bus. Admin. Or related field & 2 
yrs exp in either (a) or (b) or(c) 
or (e) or (f) or (g) as follows: (a) 
Siebel, Vitria Business Ware 
3.1.7, XSU, Geneva, Rational 
Rose Enterprise, SE!| CMM 
Level 5, Sun Solaris; (b) HP-UX 
WSAD, Total, Stratus Coboi 
NuGenesis, ECCSS, ON/2; (c) 
ATG Dynamo, SCCS, Informix 
7.6, Jrun 4.0, Solaris 5.6, XSL 
(d) Oracle Applications, SQL 
Navigator 4, Web DB, Linix 
Jboss, J2SE, (e) Peoplesoft 8 
People Tools 8.12, SQR 4.3.2 
Convoy, HP-Vectra, Message 
Agent, Data Mover n Vision 
Mass Change; (f) HP-Ux 
Business Objects 5.14, Web 
Intelligence 2.7, Informatica 
Powermart 4.7, ZABO.Please 
send resumes only to HR, STS 
Inc, 105 Nobel Ct, Alpharetta 
GA 30005 


Quality Control Engineer: Works 
under supervision of sr. mngmt 
to plan/direct development 
application/ maintenance of 
quality stds for JPEG 
QuickTime on Macintosh 
Windows; use C++ under MS 
Visual Studio/Metrowerks envi- 
ronments to develop/employ 
stds./tools/ for insp./evaiuation 
of vector/raster/imaging/ anima- 
tion files SW; establish program 
to evaluateaccuracy/efficiency 
of/client satisfaction with 
image/graphics SW; develop 
training material. Req. Bach. in 
Comp. Eng. rel. or equiv. & 1 
year exp. in job or in Software 
development (complex image/ 
graphics software). Resume to 
J. Miranda, Deneba Software 
Inc., 1150 N.W. 72nd Ave., Ste. 
180, Miami, FL 33126. No Calls. 


TRANSMISSIONS REMANUFAC 
TURING P RAM MANAGER 
Will provide mechanica! engin 


ess changes, and w 
ering approvals and make nec 
ry changes to Bil 


ry; experienc 
eering of trans’ ion interne 
ture, of product Processes and 
tooling used for transmission assem 
of quality processes for re- 
manufactured products. Must have 
current authorization to be perman. 
ently employed in the United States 
Send resume with SSN to Tanya 


Lawson, Williams Technologies 


P.O. Box 1548, Summerville, SC 
29484-1548 


Systems Analyst (Georgia) 
Analyze user requirements, pro- 
cedures, and problems to auto- 
mate or improve existing sys- 
tems. Design, code and test GU! 
using C++, UNIX, ORACLE 
AS/400 (RPG, CL, DB2/400) 
IBM AAS/400, OS/400, RPG- 
ILE RPG/400 CL/400. 
TSO/ISPF, JCL, IDMS, CICS. 
and COBOL. Telecom software 
and products experience is 2 
must, generally in the areas of 
customer care and billing. BS in 
Computer Science any 
Engineering or equivalent and 
relevant experience Send 
resume to Vivian Fernandes, 
Manager Resources, MBT 
International, Inc 400 
Perimeter Center Terrace, NE. 
Suite 900, Atlanta, GA 30346, or 
e-mail 
career@us.mahindrabt.com 


vide support to such groups as Black Data Processing Association 


Women in Technology, the National Association of Female 


Executives and the Society for Hispanic Professional Engineers 


The final priority, fostering stronger partnerships with col 


leges and universities, deals with the pipeline of talent and the 


future. “We've seen some incremental improvements for women 


and Hispanics over the past eight years, and we've seen improve 


ment in the number of women and minorities occupying seats in 


undergraduate IT-related studies,” Knowling says. “However, thes 


enrollment figures aren't translating to placement in the professio 


The result is that we have a mass of people who are opting out of 


IT and choosing other fields not because they don’t want to be an 


engineer but because they don't have access 


Among the barriers identified in pursuit of an IT career is tt 


perception that the profession is one of isolation/working alone 


24/7 and instability. Reality, according to the report, is that creatin 


and innovating are team efforts, that there is a direct line betweer 


IT development and business performance, and that the majority 


of organizations are committed to a balance between work and 


personal life 


For the full report and best-in-class action steps, go to 


www. itaa.org/workforce 


IT Careers 


For information on recruitment advertising, 


Please contact: Nancy J. Percival, 


Director, Recruitment Advertising, 


at 800-762-2977 
500 Old Connecticut Path 
Framingham, MA 01701 


Produced by Carole R. Hedden 
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Director of int'l Sales Opera- 
tions - Asia Pacific wanted by a 
Telecommunications co. in 
Newark, NJ. Must have a 
Bachelor's degree in Manage- 
ment or related field & 5 yrs 
exp. as a Director, int'l Market- 
ing/Mngr. Sales & Marketing 
Exp. must include: 5 yrs. of Int'l 
Sales exp. specifically in the 
Asian Region and 1 yr. exp. in 
communication related distribu- 
tion in the Asian Region. Please 
respond to Net2Phone, Inc, 520 
Broad Street, Newark, NJ 
07102 Attn: Melinda Pollard 
reference # 0022077 
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ates. Salary 
hours/wk 


Staniford 
02114 


Database Administrator. (NY, NY 
Design & administer database 
solutions. Perform all aspects of 
Oracle, NT & UNIX admin, incl 
nstaliation, tuning, migration 
space mgmt, backup & recovery 
Design database solutions using 
bstat/estat, PL/SQL coding, SQL 
Loader & clustering/replication on 
UNIX/ NT platform. Design & 
implement UNIX Shell & NT 
batch scripts/tools. Coordinate wi 
techn project mgrs, PL/SQL dvi- 
prs and DBA team to confirm 
web-feasibility & efficiency. Req 
Master's in Comp. Sci or Comp 
Appl. or foreign degree equiv & 2 
yrs exp. in job offered. Send 
resume to HR 
WeightWatchers.com, 888 7th 
Ave, 8th Fi, NY, NY 10106. 





COMPUTER PROGRAMMERS 
'D-3D GRAPHICS A Boston 
company engaged in the 
sign, development, and sale of 
State-of-the-art software t 
s the comr atior 
echnical data ac 
vetworks, has an immed 
highly skille 
3D Graphics 


val presentat 
mum educationa 

clude a Bachelors 

degree i ster Science, Math 
2matics, or other relevant major 
r ence required is 

lustry experience 

programmer. 

2D-3D CAD/CAM 


Specifically re 


quality s 
or high-cost-per-error env 
nents (JIT ly chains, geo 


surface milling, etc 


develop aig s wh 
form mathem jeometric rep: 
esentat > con manip 
ellations. Additionally re- 
the demonstrated ability tc 
or geometric 
data. Furthe ired is the der 
onstrated ab develop 
ial CAD/CAM-related software 
UNIX-based platforms. Finally 
red is the demonstrated ability 
ptimize and configi 


together with 

2eks annual vacation. 

and dental plans, and 

competitive benefits. 

Qualified applicants respond with 

copies of resume only to 

Case # 20) 1322, Labor Ex- 

change Office, 19 Staniford Street. 

18 Floor, Boston, MA 02114. An 
EOE/MFHV 
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Sometimes our single greatest id 
‘ts born of many great minds. 


Brainstorms, Think tanks. Discussions. They go by 
different names, but they all perform a similar task 
turning good ideas into great ones. At SBC, we're 
always searching for talented professionals who have 
the ability to develop new solutions, and drive them 
to revolutionary results through teamwork and 
collaboration. We're one great company. Shaped by 


180,000 great people 


ymMmunications company votéd “America’s 


Most Admire 


Consultant Software Engineer to 
serve as an expert technical re- 
ource ac functional organiza- 
tions to perform functional analysis 


gning these f 
in-depth understand 
which the application is 
sding establishir 
Will over 
ct devel 
le by providing sup 
hroughout 
pletion 
plication 
with a date 
7 or database 
or projects and subsystems. Will 


ntain external/us 


atives for the ¢ 


ects or strate 
rs or exte groups, bn 
n. Will act as a 
usiness units to 
ous project and technol 
ssues. Will serve as a techni 
corpo 


on resolution of 


siness né 
Will be 
esting/QA, 
2st plans for complex modules 
planning and 


tance testing. R 
s degree in Con 
gineering, Math 
ics and four (4) years experience in 
b offered OR four (4) years expe- 
ce software development 
Candidate must also possess dem: 
onstrated exp in Oracle and Informix 
database analysis and design and 
demonstrated expertise developing 
datawarehouse applications. Salary 
0,500/yr; Mon-Fri, 9:00AM: 
M. Submit two copies of resu- 
me to Case #: 200116228, Labor 
Exchange Office, 19 Staniford St 
1st fl, Boston, MA 02114. EOE 
Applicants must be eligible to 
accept full-time employment in U.S 


by Fortune magazine. Check us out at 
www.sbc.com/careers. Or visit our 
diversity site at www.sbcdiversity.com. 


eae 
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Lead Software Engineer. To lead 
a team of software engineers 
responsible for development 
and maintaining database prod- 
ucts using SQL, C++ and Visual 
Basic to be used by Chinese 
and Japanese speaking cus- 
tomers. Will code the conver- 
sion routine between DBCS and 
Unicode set by using C++ to 
support Chinese and Japanese 
database systems and translate 
database messages from 
English to Chinese and 
Japanese Consult with 
Chinese and Japanese cus- 
tomers with respect to the data- 
base products. Must have 
bachelor or foreign equivalent 
degree in computer science 
computer engineering or related 
field. Must have 2 % years 
experience in writing programs 
in Chinese and Japanese com- 
puter codes. Fluen spoken 
and written Chinese and 
Japanese. 40hrs/wk. 8:30 am to 
5:30 pm. $83,388/yr. Employer 
Paid Ad. Send resumes to 
MDCD/ESA, P.O. Box 11170 
Detroit MI 48202-1170 
Reference No. 210355 


Market Research Analyst 
sought by New Jersey-based 
s/ware consulting firm to 
research, analyze, design, and 
implement mktg strategies and 
business policies in IT sector. 
Must have a Bach or equiv in 
Comp Sci. or Electronics, with 
5 yrs exp in mktg and s/ware 
tehnologies. Respond to: HR 
Dept., AK Systems, Inc., 100 
Metroplex Drive, Suite 303 
Edison, NJ 08817. Email 
natalya@aksystems-inc.com 
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Senior Computer Consultant: 
Analyze, design, develop, test & 
implement in Oracle, C/C++, 
Unix, NT, Peril, CGI, Netscape, 
Livewire, Javascript, Java, 
Client/Server, MS technologies, 
OOA/OOD, distributed process- 
ing, thin-client; 50-75% travel 
reqd; Must have: BS in comput- 
er science or related field and 2 
yrs exp in job offered. Respond 
to: G. Simpson, HR Manager 
700 King Farm Bivd., Rockville. 
MD 20850 (Refer to Code: BD) 


Opening for a Software Engineer 
to design, develop, test internal 
appls using VB, HTML/DHTML 
ASP, Javascript, VBScript, Active- 
X, IIS, etc. under Windows OS 
evaluate new methodologies and 
develop plans for improving exist- 
ing systems; customize and mod- 
ify appls per user reqs; maintain 
documents and prepare program- 
ming specs; train users in appli- 
cation usage. Require: MS or for- 
eign equiv. in CS/ Comp Engg & 
2 yrs exp in IT. F/T position.Salary 
commensurate with experience 
Resume to: HR, Learning 
Express, Inc., 29 Buena Vista 
Street, Ayer, MA 01432 


Matrix Management Systems, 
Inc., is looking for: 

Programmer Analysts 

Should have a bachelor’s degree 
in computer science/related field 
with 3+ years of experience in the 
following: Java, JDBC, J2EE 
XML, EJB, XDI, Oracle, Cold 
fusion, Clear Quest, VC++, DB2 
CICS, COBOL, Rational Rose 
WinRunner and LoadRunner 


We accept foreign education 
equivalent of the degree, or the 
degree equivalent in education 
and experience. 


Send Resume to Attn: HR, 932D 
Atlantic Ave, Hoffman Estates, IL 
60194 


System Administrator: Design 
implement, Intel based servers. 
workstations w/OS of Windows 
2000, XP. Configure & route 
Linksys routers and switches & 
Proxy Firewalls. Maintain NFS. 
WINS & RAID Array System 
Provide maintenance & back- 
up/restore for servers using 
Backup Exec. Maintain compa- 
ny's website and software appli- 
cations. Req. Bachelor Degree 
or equivalent in !nformation 
Technology, CIS or related field 
Must be proficient in Backup 
Exec., DNS, FTP, Windows 
2000 Server, XML, SQL Server, 
DHCP. 40hr/week, 9-5. Contact 
Law Offices of Jing Dong, P.C. at 
1800 Century Bivd., Suite 915. 
Atlanta, GA 30345 


Software Engineer, Sr. - 
Project mgmt & tech. support 
of MS Exchange application 
hosting svcs, design & devel- 
op MS Exchange products 
interface architecture to back- 
end relational server data- 
base development for front- 
end user interfaces for Web & 
Windows apps. B.S. or equiv. 
in Computer or related Sci + 2 
yrs experience. Must be MS 
certified. Send resume to 
Software Engineer Position, 
Intermedia.net, Inc., 800 
California St., Ste. 200 
Mountain View, CA 94041 


ee iath aa 
PROGRAMMER IV 

Bethesda, MD 
HMSHost, a global traveler food 
service co., seeks Computer 
Programmer IV. Develop, design, 
implement, modify and maintain 
business applications, using skills in 
VB, UNIX shell scripting, PUSQL, 
SQL Server and Oracle. Analyze. 
Test. Document. Min. reqs. are 
B.S/equiv. in Computer Science/ 
MIS related field and 2 years of 
experience in the duties. 40 hrs/wk, 
Mon-Fri, 8-5. Excellent salary. Email 
resume with Job Code CP to: 
resumes@hmshost.com. (Subject 
line must include Job Code CP) 
eoe/mfdv/dfw. Absolutely no calls. 


SOFTWARE ENGINEER 
wanted by IT Consulting 
Co. in Houston, TX. 
Must have degree & 
exp. Respond by resume 
only to: Mr. M. Guest, 
G/S-#10 Creek 
Resources Corp., 200 
W. Trower Blvd, Ste 4, 
Mannford, OK 74044. 


Logic & Physical Designer 
wanted to plan & dvip s/ware 
projects. Will dsgn multi- 
dimensional analysis s/ware, 
provide consulting svcs to 
mgmt, staff, customers: dvip, 
analyze, impimt analytical & 
computational techniques & 
methodologies for solution 
of complex problems. BS in 
Comp Sci reqd. Send 
resumes to Beniamino 
Barbieri, PhD, ISS (USA), 
Inc, 1602 Newton Dr, 
Champaign, IL 61826. No 
calls 


Market Research Analyst I 
Conduct mkt research for com- 
puter products & svcs to deter- 
mine potential, maintain & 
improve sales & mkt penetra- 
tion. Establish, design & admin- 
ister formats for research & 
analysis, prepare reports & 
analyses, & use to determine 
strategy & focus. Train & super- 
vise staff & junior analysts. 
Follow up to determine effec- 
tiveness of methods & eforts of 
competitors. BA or equiv + 1 
year. Respond to VP, HR, En 
Pointe Technologies, 100 N 
Sepulveda Bivd, 19th Fi, El 
Segundo, CA 90245 


Mechatronics seeks software 
developer, engineers involved in 
developing Knowledge Based 
Engineering software and tools 
deploying KBE/CAD/CAM/CAE 
tools and methodologies 
Applicants must have minimum 
BS with some exp. Apply at 
jobs@mechatronics-us.com 


IT Professionals is a small but 
stable company. We are looking 
system/programmer analysts to 
design & administer web appli- 
cations & web enabled data 
analysis. Require BS. Exp. in 
VC++, COM, Mainframe GUI 
Crystal is plus. Please send 
resumes to pete@itprofs.net. 
EOE 


Computerworld * InfoWorld * Network World * May 19, 2003 
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MILLIONS OF 
READERS 


MILLIONS OF 
SURFERS 


ONLY 
THOUSANDS 
OF DOLLARS 


TOTAL IMPACT 
TOTAL 
SAVINGS 


Put your message in 
IT careers and 

IT careers.com and 
reach the world’s 


best IT talent. 


ITCAREERS 


where the best get better | 
1-800-762-2977 








CW030519E/W/MW 2 





SolutionsiQ seeks DB App. Engr. 
for HQ office in Bellevue, WA 
DESC: Dsgn, dev, & impi. RDBMS. 
Uls, components, & apps. to meet 
bus. reqs. & objs. Anlyz. existing 
sys. & dev. strategies & soins. to 
opt. bus. logic or flow. Prov. config- 
uration mngment. Conduct sys 
arch. & dsgn reviews. Port & mi- 
grate data from var. d/b, & plats. 
Communicate functional & tech 
specs, reqs, & features. Write 
stored proc. & triggers & queries. 
Util. SQL, VB, C/C++, C#, ASP, 
ASP.NET, ADO.NET, VBScript 
Jscript, HTML, COM/DCOM, XML. 
XSLT, IIS, & Win o/s. REQS: BS in 
Engr, CS, Math, or Physics + 3 yrs 
exp. dsgn, dev, & impil. RDBMS. 
Uls, components, & apps. util. SQL. 
VB, C/C++, ASP, VBScript, Jscript 
HTML, COM/DCOM, XML, IIS, & 
Win o/s. Prem. sal + benes. Pls. 
reply to S. Hentschell, Job # SIQ- 
215, 1260-116! AVE NE, Ste. 100, 
Bellevue, WA 98004 


Seeking qualified applicants for the 
following positions in Memphis. 
TN: Senior Systems Programmer 
Serve as project/team leader. 
Devise procedures to solve com- 
plex problems with systems/appli- 
cations. Requirements: Bachelor s 
degree* in computer science, MIS. 
engineering or related field plus 5 
years of experience in systems/ 
applications development. Experi- 
ence with RDBMS; software 
design; and Java and/or C++ also 
required. “Masters degree in 
appropriate field will offset 2 years 
of general experience. Submit 
resumes to Sibi George, FedEx 
Corporate Services, 1900 Summit 
Tower Bivd., Suite 1400, Orlando. 
FL 32810. EOE M/F/D/V. 


Programmer/Analyst 
needed to design and 
implement multi-tier 
applications using 
COM+, VC++, integrate 
with MS project, MSSQL 
server, and other 
RDBMS. Send resumes 
to 1T@Shrader.net or 
contact Craig Shrader at 
Shrader Engineering 
Co. (713) 465-6502 Fax. 


System Administrator: Install, con 
fig., manage HTTP, FTP, SQL, Mail 
& DNS Servers, & enterprise mes 
saging syst. Develop & implement 
operating & maintenance proce- 
dures for Web-related data ctr. 
equip., backup & remote monitoring 
Procedures, using applicable net 
work protocols. Develop, config. 
monitor, manage security mea- 
sures for IS & networks, incl. fire- 
walls, VPN & antivirus syst, & 
monitoring & mgmt tools. Oversee 
syst., database & metabase back- 
up & mgmt. Must be MS Cert 
Professional. Respond SysAdmin 
Position, Intermedia.net, Inc., 800 
California St., Ste. 200, Mountain 
View, CA 94041 


Cap Gemini Ernst & Young U.S. 
LLC is currently seeking individu- 
als to fill Consultant and Manager 
positions in multiple locations 
nationwide. Please apply on-line at 
http://www.us.cgey.com/careers/ 
eRecruit.asp using Job Ref#1181 
for Consultant or #1182 for Mana- 
ger. CGEY is an Equal Opportun- 
ity and Affirmative Action employer. 
All qualified applicants will be con- 
sidered for employment without re- 
gard to race, religion, color, nation- 
al origin, age, sex, marital status, 
sexual orientation, disability or sta- 
tus as a Vietnam-era, special dis- 
abled and other covered veteran 
status. NO PHONE CALLS 
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Principal Software Engineer to par- 
ticipate in every phase of analysis 
design, implementation, and inte- 
gration of our proprietary systems 
to meet our worldwide technology 
strategy. Specifically, will partici- 
pate in the Core Technology Group 
in our e-Business Division to help 
drive the delivery of B2B applica- 
tions, infrastructure support of 
Encina-based applications, and 
guide overall architecture and 
design decisions. Will participate 
in the delivery of new authentica- 
tion and authorization framework 
to unify several business units. Will 
focus on scalable and distributed 
systems. Will utilize C++ Java 
SGML, XML, XSL-T. SOAP, IBM s 
WebSphere, and communication 
protocols like HTTP, HTTPS, and 
HOP. Requires Bachelors degree 
in Computer Science, Engineering, 
Mathematics, or Physics and three 
(3) years experience in job offered 
OR three (3) years experience in 
developing client/server applica- 
tions. Candidate must also pos- 
sess demonstrated expertise in 
OOD (Object Oriented Design) 
and Design Patterns; demonstrat- 
ed expertise in architecture of scal- 
able and distributed systems using 
middleware tools; and demonstrat- 
ed expertise delivering B2B appli- 
cations using XML over HTTP. 
Salary: $90,500/yr; Mon-Fri, 9:00 
AM-5:00PM. Submit two copies of 
resume to Case #: 200116225 
Labor Exchange Office, 19 Stani- 
ford St., 1st fl, Boston, MA 02114. 
EOE. Applicants must be eligible 
to accept full-time employment in 
U.S. 


Senior Software Engineer-Work 
with company's marketing and 
technical staff to specify, design 
implement, test, and document 
an XML storage engine built on 
top of the Berkeley DB embed- 
ded database engine. Design 
data management systems 
deployed by customers 
Implement an XPATH query 
processor, optimizer, and execu- 
tion engine. Design and imple- 
ment XML data dictionary using 
embedded data management 
facilities provided by Berkeley 
DB. Work with customers and 
early adopters to ensure the 
product meets market demands 
Conduct normal best-practices 
engineering operations, includ- 
ing design and code reviews 
and test planning and evalua- 
tion. Meet with customers, in 
coordination with company's 
sales/marketing groups, to pre- 
sent technical details of the XML 
storage system and assist in 
product sales and deployment. 
Requirements include a 
Bachelor's degree or equivalent 
in Computer Science, an 
Engineering discipline or related 
field and six years of work expe- 
rience in the job offered or relat- 
ed field of software engineering, 
Applicants must have unrestrict- 
ed authorization to work in the 
United States. Salary $100,000/ 
year. 40 hours/wk. Respond with 
two copies of resume to Case 
#200201663, Labor Exchange 
Office, 19 Staniford St., 1st Fl 

Boston, MA 02114 


Network & Systems Admin- 
istrator needed at client 
sites to dsgn, impimt & 
maintain LAN/WAN n/works 
using Novell Netware, Win 
NT/2000, SCO Unix & con- 
figure CISCO, Extreme, 
Nortel, Cabletron Enterasys 
Make Routers/Switches, 
TCPAP, Sonet, DNS, DHCP 
& others. Must be CNE & 
CCNA certified. Apply to: 
Global Consultants, 25 
Airport Rd, Morristown, NJ 
07960. 


Senior Software Engineer 
Burlington, MA: Perform signifi- 
cant software product design 
developmt, implementation, & 
testing for eBusiness applica 
tions. Design & implement DB 
schema in a transactional envi- 
ronment for Oracle & MS SQL 
Server DBs. Design. implement 
& performance tune software to 
generate DB schema from mod- 
els & representations of data 
structures, using MOF & OMG 
stds to implement data models. 
the framework to map objects to 
relational DBs, using UML & 
Design Patterns for object-ori- 
ented design; & the persistence 
layer to provide access in a 
robust, OO manner & transac- 
tion support to the DB from other 
product components. Use RPC 
& RMI to enhance the AP! pro- 
viding remote access to other 
core APIs. Work closely w/prod- 
uct mgmt & other engineers to 
translate high-level customer 
reqmts into product functionality 
involving DB systems, transac- 
tion techniques, compiler tech- 
nology, muiti-threaded program- 
ming in Java & C++, distributed 
systems computing, & other 
related technologies. Develop & 
document the reqmts in the 
Functional Specification 
Estimate effort required to imple- 
ment specified functions & track 
Progress against the estimate 
Test the software impiementa- 
tion to assure quality, & support 
the implementation during the 
quality assurance phase 
Minimum Reqmts: Master's 
degree or equiv. (will accept for- 
eign Master's degree or 
Bachelor's degree + 4 yrs of pro- 
gressive exp. as equiv. to a 
Master's degree) in Computer’ 
Sci. or Computer or Software 
Engr’g, + 3 yrs of exp. in the job 
offered or in jobs meeting follow- 
ing reqmts: 3 yrs of exp. in soft- 
ware product developmt in multi- 
threaded Java & C++ for distrib- 
uted systems, 3 yrs of exp. in DB 
schema design & implementa- 
tion in a transactional envir. for 
both Oracle & MS SQL Server, 3 
yrs of OO design using UML & 
Design Patterns, & 1 yr imple- 
menting data models using the 
MOF & other OMG stds. Exper 
may be gained concurrently 
Hours: M-F, 9 am-5 pm. Rate of 
Pay: $97,000/yr. Please submit 
2 copies of resume to: Case # 
200201551, Labor Exchange 
Office, 19 Staniford St, 1st Fl 
Boston, MA 02114 


Support Mgr. Dallas, TX. Manage 
team of support consults & pro- 
vide backend support in deploy- 
ment, installation & troubleshoot- 
ing of Amtrix & TSIB; liaison 
widevelop team in integration 
stress & load testing of Amtrix & 
TSIB (TradeSync Integration Bro- 
ker). Apps & tools include Web- 
logic. Exceed, Amtrix & TSIB: 
Oracle 8i & 9i on Unix & WinXx 
OS. Reg. BS comp sci or related 
field & 4 yrs exp in apps consult- 
ing, incl. 2 yrs w/AMTrix appi. inte- 
gration, 1 yr exp leading or man- 
aging support consults. Resumes 
to: M. Williams, Viewlocity, Inc. 

3475 Piedmont Road, Suite 1700. 
Atlanta, GA 30305 


Software Engineer: Design, de- 
velop, implernent, test and main 
tain software applications in busi- 
ness/ manufacturing systems 
Expertise in Client server and 
web development, MS Access. 
SQL server database, Visual 
interdev, C++, VC++, MFC, Java, 
Javascript, ASP, COM/DCOM 
DirectX, Socket programming 
UML, Rational Rose, Windows 
NT & Unix. Requires BS in Comp. 
Sci. Engg/Re! field with 2 yrs exp 
Wages: $66,000/yr, 40 hrs/wk 
8am-5pm. Send 2 resumes to 
Case#200201474, Labor Ex- 
change Office, 19 Staniford St 
1St Fi, Boston, MA 02114 
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For over 20 years, Syntel employees across North America, Europe, and 
Asia have helped build advanced information technology systems for lead- 
ing Fortune 500 companies and government organizations to improve their 
efficiency and competitiveness. Today, Syntel professionals are building 
rewarding careers by providing solutions in e-business, CRM, Web Design 
and Data Warehousing. 


Come discover why Forbes magazine placed Syntel second on its list of 
“The 200 Best Small Companies in America” and Business Week ranked 
us #11 on its list of Hot Growth Companies. 


Due to our rapid growth, we have immediate, full-time opportunities for 
both entry-level and experienced Software Engineers, Consultants, 
Programmers, Programmer/Analysts, Project Leaders, Project Managers, 
Supervisors, Database Administrators, Computer Personnel Managers 
and Computer Operations/Account Managers/Account Executives with 
any of the following skills: 


Mainframe 
* IMS DB/DC or DB2, MVS/ESA, 
COBOL, CICS 


DBA 
* ORACLE or SYBASE 


Client-Server/WEB 
* Siebel * Oracle Applications & Tools 
© Websphere * Lotus Notes Developer 
* Com/DCom ¢ UNIX System Administrator 
* Web Architects ¢ UNIX, C, C++, Visual C++, CORBA, 
* Datawarehousing OOD or OOPS 
* Informix, C or UNIX © WinNT 
* Oracle Developer or Designer 2000 = * Sybase, Access or SOL server 
¢ JAVA, HTML, Active X * PeopleSoft 
* Web Commerce * Visual Basic 
* SAP/R3, ABAP/4 or FICO or MM * PowerBuiider 
&SD © |EF 


¢ Focus, IDMS or SAS 


Account Executives, Account Managers and 


Business Development/Account Specialist 
positions available. 


Some positions require a Bachelor's degree, others a Master's degree. We also 
accept the equivalent of the degree in education and experience. 


With Syntel (NASDAQ: SYNT, you'll enjoy excellent compensation, full benefits, 
employee stock purchase plan and more. Please forward your resume and 
salary requirements to: Syntel, Inc., Attn: Recruiting Manager-LD05, 

525 E. Big Beaver, Suite 300, Troy, Ml 48083. Phone: 248-619-2800; 
Fax: 248-619-2888. Equal Opportunity Employer. 
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Computer 

As a $180 million industry 
leader, we are able to provide 
our people with the kind of work 
environment, opportunities, ben- 
efits, growth potential and pro- 
gressive training others can't 
match. We are looking for IT 
professionals with a minimum of 
1+ years experience for the fol- 
lowing job titles. 


* PROGRAMMER/ANALYST 
SYSTEMS ANALYST 
SYSTEMS PROGRAMMER 
DATABASE 
ADMINISTRATOR 
DATABASE ANALYST 
LAN ADMINISTRATOR 
SOFTWARE ENGINEER 
WEB DEVELOPER 
ARCHITECT 
DATA WAREHOUSING 
ARCHITECT 
IT PROJECT MANAGER 
BUSINESS ANALYST 
SAP FUNCTIONAL AND 
TECHNICAL EXPERTS 
HIGH LEVEL SOLUTIONS 
SALES EXECUTIVES 
QA/TESTER 
TECHNICAL RECRUITER 


Our skill sets include 

* CLIENT/SERVER 

* ERP - SAP, ORACLE 
PEOPLESOFT 

+ INTERNET 

* E-COMMERCE 

+ MID-RANGE, AS/400 

* CRM - SIEBEL 

* DATA MODELING 


Contact the Corporate Head 
quarters for positions available 
in the following areas: Arizona 
Colorado, Connecticut, Florida 

rgia, Illinois, Massachusetts. 
New Jersey, New York, North 
Carolina, Pennsylvania, Sou 
thern California, Texas, Virginia 
DC 


For consideration please refer 
ence Job Code: RIRCW15 and 
send your resume to: RCG 
Information Technology; Attn 
National Recruiting 379 
Thornall Street, Edison, NJ 
08837; FAX: (732) 744-3583 or 
email to: recruit@rcgit.com We 
are an Equal Opportunity 
Employer. M/F/D/V. 


www regit com 
RCG Information Technology 


Software Professionals needed 

Applicants possessing BS or 
equivalent and/or relevant work 
experience should apply. Exper. 
jence in design, develop and 
implement custom application 
software solutions from concept to 
production is required. Duties 
include: review Project plans to 
determine feasibility, budget cost 
and schedule. Applicant should 
have minimum of 4 years experi. 
ence in Delphi and 1 year experi 
ence in Java, XML/XSL. Exper 
€ an be simultaneous. Work 
with some of the following: Delphi 
Java, XML/XSL, XSLT, JDBC 
Java Swing Oracle and SQL 
Server. Experience in government 
projects is preferable. Mail resum 
es, references and salary require 
ment to: Steliar Corporation, 594 
Marrett Road, Lexington, MA 
02421 


Programer/Analyst - Will analyze 
design, develop, test, implement 
and maintain customized software 
applications in a client/server envi 
ronment. May 
systems related to Internet/intranet 
1E Commerce. Must have Bachelor 
of en in Computer Science 
Math., Engineering or related. Must 
have 2 yrs exp. in job offered or 2 
yrs exp. in Software development 
Such experience must include 


used on multi-tier 


J2 Must willing to be 

assigned to un-anticipated client 

sites throughout the United States 

Hrs: 8:00am 

Please send 2 

pies of resume to: Case # 2002 

13, Labor Exchange Office. 

Staniford St., 1St Fi, Boston, MA 

02114 


iIT|careers 


DATABASE ADMINISTRATOR 
Database Administrator to do 
logical and physical design of 
Oracle database; Code test and 
implement Oracle scripts apply- 
ing knowledge of Database 
Management Systems; Cal- 
culate optimum values for 
Oracle database parameters 
performance tune Oracle data- 
bases; Mode! Oracle database 
security; manage backup and 
recovery of Oracle databases 
make changes to Oracle data- 
base applications using knowl- 
edge of Oracle Applications 111i, 
Oracle 8i, VeritasCluster, |- 
Watch & AppWorx. Require- 
ments: Bachelor's Degree or 
equivalent in Computer Science 
or related field and two years 
experience as a software engi- 
neer or DBA, expertise in Oracle 
database administration which 
includes logical design, physical 
design, performance tuning 
backup and recovery, coding of 
scripts, knowledge of Oracle 
Applications 11i, Oracle 8i 
VeritasCluster l-Watch & 
AppWorx. Salary: $80,000/year 
Working Conditions: 8:00 A.M 
fo 5:00 P.M., 40 hours/week 
involves extensive travel and 
relocation Apply: Manager 
Armstrong County Team PA 
CareerLink, 1270 North Water 
Street, PO Box 759, Kittanning 
PA 16201, Job No. WEB326881 


Engineers - Web 
Hosting 
Infrastructure 


CSC, Fortune 500 ieader in 

management and __ information 

technology consulting, systems 

integration and outsourcing, is 

urrently seeking an experienced 

nal f Newark, DE 

design and document web 

dlutior 3 iPlanet 

e and Weblogic wet 

and application server 

ftware as well as LAN networking 

(TCP/IP, DNS and firewalls) 

tablish operati specifications 

ne aforementioned software in a 

web _ hosting 

Provide a point for 

scalated support for the operations 

team on a 7x24 basis (8-10 

hrs/month). Bachelor's or equivalent 

and 4 years of IT experience is 

squired. Three of 4 years of 

red experience must include 

One of 4 years of 

required experience must incl 

Planet web and application server 

and WebL application clusters 
with Apache/Tomcat servers. 

SC offers cc salaries and 
excellent benefits. Please forward 
resumes to: CSC, Attn: Human 
Resources, 400 Commerce Drive 
M/S 1SB6, Newark, DE 19713. 
£ rence job code BS072803 in 

letter. EOE M/F/D/V 


MAGNA INFOTECH consulting 
company is looking for Program 
mer/Analysts, Software Consult 
ants and Software Engineers with 
experience in one or more of the 
following 

ERP: SAP, Baan Implementation. 
Tools, Admin 

UNIX: C, C++, Shell, AIX, HP-UX 
Solaris Admin, Networking 
AS/400: RPG/400, COBOL/400 
CL, BPCS, JD Edwards, Synon 
WINDOWS: VC++, VB, PB, MFC 
OLE/COM, Admin 

REAL TIME: Microprocessor 
RTOS Programming 

INTERNET: Java, Javascript, CGI 
Peri, WAP, Admin, Active X, ASP 
DATABASE: Oracle, Informix 
Sybase. DB2 Admin Developer 
2000, Designer 2006 


Sales Manager / Marketing Mana 
ger: must have at least 2 years of 
Sales experience, BA degree or 
foreign equivalent degree and 
basic computer skills. Multiple posi 
tions exist at various sites across 
the US. Please mail your resume 
to: Recruit. Dept. Ref. #CWO05-03 
Magna Infotech Ltd., 1 Padanaram 

208, Danbury, CT 06811 


ND based IT company has open 
ings for Software Engineers & 
DBAs: (Multiple openings): Re- 
search, Analyze, Design, develop 
test, diagnose, and implement vari 
ous business applications. 


Real time OS Vx Works, Networking 
Protocols, PeopleSoft, IPSEC, IKE 
BAAN ERP, BAAN tools, SAP 1/3 
and ABAP/4, Oracle 8.x/9.x/11.x 
Sun Solaris 2.8, Veritas Clustering 
Oracle Utilities, Unix Shell Scripting 
PL/SQL, Erwin Data Modeling. 
Designing, Web Technologies like 
J2EE, JDBC/ODBC, Web sphere 
EJB, COM/DCOM, C/C++, MS SQL 
Server, UNIX, J2EE Architect/Team 
Lead experience in implementing 
financial applications on HP-Tan 
dem Non-stop systems. Product 
Administration System SABLIME 
Business Objects 5.1.5, Data Ware 
housing, Informatica - Power Center 
5.1, SAS 8, Teradata Utilities, Erwin. 
Power Mart5.1 PowerCenter 
Data Junction, Cognos Impromptu 
7.0, JD Edwards, WinRunner 6.0 
Test Director 6.0, Silk, Load Runner 
Rational Suite, SQA Suite 


5. 


DBAs must have experience in 
installation, migration, moving, set 
up, monitoring and trouble shooting 
of various database applications 
May require travei to client sites. 
Software Engineer $78,000 & up: 
DBA:$60,000 and up. Mail resume 
to 212, South 4th Street, Suite# 
202, Grand Forks, ND 58201 


SOFTWARE ENGINEER 
Software engineer to design 
develop and test computer pro- 
grams for business applications; 
analyze software requirements 
to determine feasibility of 
design; direct software system 
testing procedures using exper- 
tise in | MFG/PRO, Oracle 
Symix, Dispatch-1 and Axiom. 
Requirements: Bachelor's Deg- 
ree or equivalent in Computer 
Science or related field and two 
years experience as a software 
engineer or computer program- 
mer, knowledge of MFG/PRO 
Oracle, Symix, Dispatch-1 and 
Axiom. Salary: $66,000/year 
Working Conditions: 8:00 A.M. 
to 5:00 P.M. 40 hours/week 
involves extensive travel and 
frequent relocation Apply 
Manager Butler County 
CareerLink, Pullman Commerce 
Center, 112 Hollywood Drive 
Suite 101, Butler, PA 16001, Job 
No. WEB327611 


SENIOR PROGRAMMER/ANA, 
LYST to analyze, design, develop 
install, tune and upgrade CRM 
applications and Oracle databases 
for the telecommunication industry 
using Clarify, UNIX Shell Scripts, 
C, C++, Java, JDBC, JCL 
COBOL, FTP, CICS and DB2 on 
Windows, UNIX and mainframe 
platforms; Provide Tier 3 produc 
tion support and resolve vendor 
issues for traffic mediation sys 
tems using Xacct. Require: B.S. 
degree in Computer Science 
Engineering, or a closely related 
field with two years of experience 
in the job offered. Extensive travel 
on assignments to various client 
sites within the U.S. is required 
Competitive salary offered. Send 
resume to: Shilpa Chaudhry, Elite 
Solutions, Inc., 1670 Reserve Way 
Suite 203, Decatur, GA 30033 
Attn: Job AR 


SENIOR PROGRAMMER/ANA- 
LYST to analyze, design, develop 
test and implement n-tier web 
based application software in a 
client/server environment using 
ASP, Visual Basic, COM, COM+ 
DCOM, Active X, ADO, RDO 
JavaScript, MTS, SQL Server 
Oracle, MS Access, IIS, Visual 
Interdev and XML under Windows 
NT/2000 operating systems; Pro 
vide technical support with People: 
soft HRMS and Financial modules 
using PeopleTools, SQR and 
PeopleCode. Require: Bachelors 
degree in Computer Science, an 
Engineering discipline, or a closely 
related field with two years of 
experience in the job offered or as 
a Software Engineer. Extensive 
travel on assignments to various 
client sites within the U.S. is 
required. Competitive salary 
offered. Send resume to: Sundeep 
Chaudhry, Elite Solutions, Inc 
1670 Reserve Way, Suite 203 
Decatur, GA 30033; Attn. Job MP. 
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Computer Engineer - 
dsgn & develop finan- 
cial software systems 
involving mgt info sys- 
tems. Bch in Computer 
Science w/ 2yrs exp. 
Send resume to: Smart 
Solutions International, 
LP, 6555 N. Powerline 
Road, Suite 306, Fort 
Lauderdale, FL 33309. 


SOFTWARE ENGINEER 


40 hrs/week. 8:30 a.m. - 5:30 
p.m. M-F Job located in 
Northport, AL. Must have 5 
years exp. in Job Offered 
Research, design & develop 
computer software systems for 
business applications, applying 
principles of computer science & 
engineering. Analyze software 
requirements to determine feasi- 
bility of design. Evaluate inter- 
face between hardware & soft- 
ware, & between operational & 
performance requirements 
Develop software system testing 
procedures 8 yrs Grade 
School; 4 yrs High School; 
Bachelor's Degree in Computer 
Science or foreign equivalent. 
Send resume to: Mr. J. K 
Goswami, Applied InfoTech 
Inc 501 Bridge Avenue 
Northport, AL 35476, Phone 
(205) 758-1604 


Communications software co. in 
Westborough, MA seeks Senior 
Staff Engineer to design, develop 
and implement data communica- 
tion and telecommunication sys: 
tems source code, including devel 
opment of portable real-time proto. 
col embedded software using tools 
such as C/C++, Java: pt and 
LISP. Must have Bach. in Comp. 
Sci. or equiv.; 2 yrs exp. in develop: 
ment of telecommunications soft 
ware; knowledge of C/C++, Java 
script, LISP, embedded protocol 
software, and network protocols 
(including MPLS, OSPF, BGP, RIP, 
H.323, ATM, FR, and O-UNI) 
Salary $93,500/yr. Submit 2 
resumes to Case #200201632 
Labor Exchange Office, 19 
Staniford Street, 1st fl., Boston, MA 
02114 


SOFTWARE ENGINEER to design 
develop, implement and maintain 
web-based application software 
and databases using Oracle, MS 
SQL Server, ASP.NET, Oracle 
Forms, Pro*C, XML and COM+ 
under Windows and SUN Solaris 
operating systems. Require: M.S. 
degree in Computer Science/ 
Engineering, or a closely related 
field with two years of experience 
in the job offered. Extensive travel 
on assignment to various client 
sites within the U.S. is required 
Competitive salary offered. Send 
resume to: Murli N. Reddy 
President, Charter Global Services. 
Inc., 5445 Triangle Parkway, Suite 
190, Norcross, GA 30092; Attn: Job: 
BA 


Software Professionals 

RS Software, a leading, global- 
ly positioned software develop- 
ment and consulting firm needs 
programmer analysts willing to 
relocate to its client job sites 
nationwide with experience in 
analysis, design, implementa- 
tion and maintenance of cus- 
tomer specific software using C 
and Assembler Languages on 
TPF (Transaction Processing 
Facility) operating systems 
Send resume to: HR, RS 
Software (India) Ltd., 1900 
McCarthy Bivd. # 103, Milpitas 
CA 95035. 
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PROGRAMMER/ANALYST 


Must have Bachelors in 
Comp/ Electronics/MIS + 1 yr! 
exp in Design, configure, cus- 
tomize CRM/eCRM applica- 
tions using ORACLE, SIEBEL 
products: Finance/eFinancial, 
Cali Center, Tools, EAI, EIM, 
Workflow Management, VBC, 
eScript for Windows, AS/400, 
OS400, MQ Series. job code: 
ITC #99. InfoTalent Consult- 
ing Inc., 1 Tower Ln, Suite 
1700, Oakbrook Terrace, IL 
60181. hr@infotalent.com 


Director ERP Applications 


MBA required. Proven ERP 
major application implementation 
experience with Oracle required 
Strong Manufacturing/ Financiai/ 
HR systems experience essen- 
tial. Experience building fault tol- 
erant systems. Solid knowledge 
of Internet technologies and 
strengths in system development 
methodologies. Ideal candidate 
must be a leader with excellent 
communication/ interpersonal 
skills. Outstanding environment, 
benefits and compensation with 
this highly respected organiza- 
tion. Respond to Personnel 
Resource, Inc. via email 
prinorth@perresource.com 


HELPING YOU 
GET ONE. 
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Get IT Delivered. 


News analysis, commentary and practical tips sent 
straight to your desktop. 


To remain at the forefront of industry, today’s With a cutting-edge suite of more than 25 

IT leaders need easy access to strategic e-mail newsletters, we ensure that you have 
information, news analysis and advice. access to the information you need in a way 
Computerworld delivers with coverage that that is most useful to you. Whether it’s 
emphasizes and advocates for the user Computerworld Daily, issued the morning and 
perspective, providing balanced, objective afternoon of each business day, or weekly 
reporting on a wide range of technologies, newsletters covering the technology spectrum, 
business trends, career topics and man- there’s no better way to stay in tune, in touch, 
agement issues. Computerworld gives you the and on top of today’s ever-changing world of 
tools you need to succeed—to evaluate and IT than with Computerworld. 

implement technology solutions that put you 

one step ahead of your competition. 
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Keeley Guillerme, marketing specialist 
Peter Smith, Web development manager 
Kevin Gerich, Mark Savery, Web developers 
Bill Rigby, associate Web developer 
Matthew Moring, graphics designer 


How to Contact 


COMPUTERWORLD 


We invite readers to call or write with their comments 
and ideas. It is best to submit ideas to one of the department 
editors and the appropriate beat reporter. 


TS SC et 


TELEPHONE/FAX 


All editors unless otherwise noted below 


RESEARCH 
24-hour news tip line. . . (508) 620-7716 


Mari Keefe, research manager 
Gussie Wilson, research associate 


E-MAIL 


Our Web address is 
www. 


Staff members’ e-mail follows this form: 


ieanaieeee 


Todd R. Weiss, general assignment: Linux LETTERS TO THE EDITOR 

| messaging collaboration (717) 560-5255 Letters to the editor are welcome 
GRAPHIC DESIGN and should be sent to: 

Stephanie Faucher, design director mia nee co oe Feta 


April O’Connor, associate art director 
Julie Quinn, graphic designer 
Susan Cahill, graphics coordinator 
John Klossner, cartoonist 


COPY DESK 
Jamie Eckle, managing editor/production 


Michele Lee DeFilippo, assistant 
managing editor/production (508) 820-8126 


Bob Rawson, Monica Sambataro, senior copy editors 
Eugene Demaitre, Mike Parent, copy editors 


(508) 820-8202 
Dan Verton, federal/stz 


infrastructure security; trave 


jovernment: legisiat 


Maryfran Johnson, editor in chief 
(508) 820-8179 


ritical 703) 321-2277 


Jaikumar Vijayan, Corporate security/privacy issues: 


facturing (630) 978-8390 


DEPARTMENT EDITORS 
Don Tennant, News editor 
Craig Stedman, assistant News ec 
Julia King, Management editor 
Jean Consilvio, 2 
Tommy Peterson, Tech 
Mitch Betts, features edit 


508) 620-7714 

(508) 820-8120 
(610) 532-7599 
508) 820: 


OPINIONS 


ditor at large. 


(508) 820-8235 
(508) 820-8183 
(503) 391-1158 
503) 252-0100 


Patricia Keefe, 
Mark Hall, opinions editor 
Frank Hayes, se 


tant Management editor 
508) 620-7729 MAIL ADDRESS 
jor news columnist PO Box 9171, 500 Old Connecticut Path, 
Framingham, Mass. 01701 
FEATURES EDITORS 
Ellen Fanning, special projects editor 
Robert L. Mitchell, technology evaluations editor 


Gary H. Anthes, editor at large 


REPORTERS 


omputing/wireless; Intel P 


ADMINISTRATIVE SUPPORT 
(508) 820-8176 
(508) 820- 8178 


SUBSCRIPTIONS/BACK ISSUES 


Subscription rates: U.S., $190/year; Canada, 
; Central and South America, $250/year, 
$130/year; 3 /year, 


(508) 820-8204 
(508) 820-8177 
703) 536-9233 


Linda Gorgone, office manager 
Chery! Dudek, ac 


: network systems m ustrative assistant 


CONTRIBUTING 
COLUMNISTS 


John Berry, David Foote, Pimm Fox, 
Michael Gartenberg, Dan Gillmor, 
Thornton A. May, David Moschella, 
Bart Perkins, Nicholas Petreley 


COMPUTERWORLD.COM 
Tom Monahan, online director 
Sharon Machlis, managing editor/online 


nvestment and manage 845) 988-9630 
(508) 820-8218 
(508) 820-8231 
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(508) 620-7717 
(508) 820-8269 
(508) 620-7780 
508) 820-8216 
508) 820-8142 


Lucas Mearian, financial ser 
Faanabeenet 508) 820-8215 


Linda Rosencrance, general assignr 
transportation, 


Carol Sliwa, Microsoft: Web services technologie: 


application developmen 


REPRINTS/PERMISSIONS 
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and order reprints online. 


Ken Mingis, online news ed! 

Marian Prokop, online editor at large 
David Ramel, ¢ 
Brian Sullivan, onjine editor at large 
John R. Brillon, 
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INTEL CORP. 

INTELLIDEN INC. 

INTERNET 2NGINEERING TASK FORCE 

1ONA TECHNOLOGIES PLC 

IQNAVIGATOR INC. 

IRON SPEED INC. 

J.D. EDWARDS & CO. 

LAWSON SOFTWARE 

LifHMAN BROTHERS HOLDINGS INC. 

LEVI STRAUSS & CO. 

LIFE TIME FITNESS INC. 

LOTUS SOFTWARE GROUP 

LOWER COLORADO RIVER AUTHORITY 
MACROMEDIA INC. 

MATRIXONE INC. 

MEASURED PROGRESS INC. 

MERCURY INTERACTIVE CORP. 

META GROUP INC. 

METLIFE INC. 

MICRO FOCUS 

INTERNATIONAL LTD. 42 
MICROSOFT CORP. 10, 12, 23, 26, 36, 38 
MITSUBISHI MOTORS 

NORTH AMERICA INC. 26 
MONSTFR 46 
MORGAN STANLEY 6 
MOTIVE COMMUNICATIONS INC. 8 
MOTOROLA INC. 2B 





ORACLE CORP. 
ORGANIZATION FOR THE 
ADVANCEMENTOF STRUCTURED 
INFORMATION STANDAROS 
PARASOFT CORP 

PATTERSON, BELKNAP, 

WEBB & TYLER LLP 

PEOPLESOFT INC. 

PROVIDENCE HEALTH SYSTEM 
PUBLIC BROADCASTING SERVICE 
PUNCH NETWORKS CORP. 

QAD INC 

QUADRASIS INC. 

RADIAN GROUP INC. 

RATIONAL SOFTWARE CORP. 
RENDITION NETWORKS INC. 
RESEARCH TRIANGLE INSTITUTE 
SAP AG 

SAS INSTITUTE INC. 

SEARS, ROEBUCK AND CO. 

SIEMENS DEMATIC AG 

SILVER LAKE PARTNERS 
SOUTHERN METHODIST UNIVERSITY 
SOUTHWEST AIRLINES CO. 

SPIRE SECURITY LLC 

ST. VINCENT’S HOSPITAL 
STANFORD UNIVERSITY 

STERLING COMMERCE INC. 

SUN MICROSYSTEMS INC. 


6. 10, 12, 22. 42, 


46 


1,6, 8, 6, 


26, 42.44, 46 


SWISS INTERBANK CLEARING LTD. 
SYBASE INC. 
SYS-CON MEDIA INC. 


46 
26 
46 


THINK DYNAMICS. 

TIOBE SOFTWARE BV 

TIVOLI SOFTWARE 
TRUSECURE CORP. 

TWELVE HORSES 

NORTH AMERICA LLC 

U.S. DEPARTMENT OF JUSTICE 
U.S. MARINE CORPS 

US. NAVY 

U.S. SECURITIES AND 
EXCHANGE COMMISSION 
UNISYS CORP. 

UNITED PARCEL SERVICE INC. 
VERITAS SOFTWARE CORP. 
VISIBLE INVENTORY INC. 
VOYENCE INC. 

WAL-MART STORES INC. . 
WEB SERVICES INTEROPERABILITY 
ORGANIZATION .. 
WEBMETHODS INC. 

WELLS FARGO & CO. 
WEYERHAEUSER CO. 
WHIRLPOOL CORP. 
WHOLESECURITY INC. 

WORLD WIDE WEB 
CONSORTIUM 

XCELLENET INC. 

XEROX CORP. . 


see see 
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NEWS 


‘Terror Threats Spark IT, 
Physical Security 


Lehman Brothers 


adds access-control 
systems, safety kits 


BY DAN VERTON 
HE EVER-PRESENT 
threat of terrorism 
has spawned the 
adoption of some 

unusual workstation peripher- 

als at investment firm Lehman 

Brothers Holdings Inc. 

As part of a global program 
to improve security and lessen 
workforce anxiety in the wake 
of the Sept. ll attacks, New 
York-based Lehman Brothers 
now deploys personal safety 
emergency kits with every PC 
and workstation it installs, of- 
ficials said during an online 
conference last week. 





The kits include a gas mask, 
safety goggles and a whistle 
“to draw attention to yourself 
if in the event of an evacuation 
you need to draw attention to 
yourself,” said Ken Damstrom, 
global head of security opera- 
tions at Lehman Brothers. 

The distribution of the 
emergency kits is only the lat- 
est in a series of security-relat- 
ed steps that Lehman Brothers 
has taken, said Damstrom, 
who spoke as part of the Ter- 
ror and Technology Online 
Conference sponsored by ID- 
Partners LLC in Washington. 

Some of the moves predate 
Sept. ll, 2001. For example, 
prior to the terrorist attacks, 
Lehman Brothers began de- 
ploying a global access-con- 
trol system developed by 


Changes 


NexWatch, an Oak Creek, 


| Wis.-based division of Honey- 


well International Inc. The 
technology integrates physical 
security monitoring for all of 
the firm’s facilities in 23 coun- 


| tries, according to Damstrom. 


The NexWatch system lets 
Lehman Brothers employees 
move among offices without 
hassles and enables corporate 
security officials to track what 
is happening in each facility, 
he said. It’s also connected to 
the firm’s fire alarm systems 
and to IT systems such as the 
company’s e-mail applications. 

In another project started 
before Sept. 11, Lehman re- 
cently completed the installa- 
tion of a global closed-circuit 
television (CCTV) system that 





transmits data across its IT 


| network infrastructure, Dam- 
| strom said. The CCTV setup 


is integrated with the access- 
control system and lets the 
firm’s security team monitor 


events at offices in real time. 


In addition, Lehman Broth- 
ers has installed radiation and 
bomb detectors at its Manhat- 


| tan offices. But because de- 


ploying personnel to monitor 
all of these systems would be 
too costly, the firm is using its 
IT networks to centrally track 
images and data. 
“You simply have to work 

smarter in today’s world,” said 
Ted Price, managing director 


BT ine tumnbers 


of guards; it’s about 
the intelligence and 
the training that 
you leverage. 


TED PRICE, GLOBAL HEAD OF 
SECURITY, LEHMAN BROTHERS 
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and global head of security at 

Lehman Brothers. “It’s not 

about the numbers of guards; 

it’s about the intelligence and 

the training that you leverage.” 
The company has also 


| changed the way it approaches 


disaster recovery and business 
continuity. Its plan “is not 
written down,” Price said. “We 
have no playbook.” But, he 
added, Lehman Brothers has 
tried to build “the single best 
communication system so that 
we can get a hold of the key 
employees” if a crisis occurs. 

Damstrom said the compa- 
ny uses Franklin, Tenn.-based 
Dialogic Communications 
Corp.’s Communicator soft- 
ware, which can transmit hun- 
dreds of crisis alerts and life- 
saving instructions simultane- 
ously to cell phones, pagers 
and other devices. 

Lehman Brothers also has 
internally developed software 
that lets workers use any PC 
to access their desktops from 
remote locations. D 
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Linux Claim 


noted that he would become 
more concerned if SCO’s law- 
suit against IBM were to suc- 
ceed but said that’s not a sure 
thing. “They haven’t proven 
anything,” Poole said. “Right 
now, I’m just amused.” 

But Brad Friedman, vice 
president of information ser- 
vices at Burlington Coat Fac- 
tory Warehouse Corp. in Bur- 
lington, N.J., said SCO’s legal 
threat “bears to be watched by 
people like ourselves who use 





Linux.” The same applies to its | 
| economic effect Linux is hav- 


suit against IBM, he said. 

It’s too early to determine if 
or how Burlington Coat will 
be affected, Friedman said. But 
he plans to seek legal advice to 
better gauge “the potential im- 
plications and what we should 
be doing about it, if anything.” 

Referring to the open- 
source intellectual property 
issues being raised by SCO, 
Tony Iams, an analyst at D.H. 
Brown Associates Inc. in Port 
Chester, N-Y., said it was “only 
a matter of time before some 
of these were tested in court.” 

But a key reason for SCO’s 


S$C0’s Legal Gambit 


legal onslaught could be the 


ing on the company, Iams said. 
An upcoming D.H. Brown re- 
port comparing Linux distrib- 
utions with SCO’s UnixWare 
operating system shows that 
Linux is “better than or equal 
to UnixWare in their function- 
al capabilities,” he added. 


Defensive Posture 
Darl McBride, SCO’s CEO, in- 
sisted that the company’s ac- 
tions are reasonable. “These 
are our crown jewels we’re 
talking about,” he said. “The 
world is not about stealing 
people’s code, laundering it 
and saying everything’s OK. In 
the end, what you could see 
come out of this is legal Linux.” 
For now, though, Linux ven- 
dors that continue to ship the 
operating system will do so “at 
their own peril,” McBride 
warned. SCO is immediately 
halting sales of its own Linux 
releases, though the company 





said it will continue to support 





existing users and won’t target 
them for any legal action. 

SCO’s legal fight could fail 
even if some of the company’s 
source code did make its way 
into Linux, said Daniel Rav- 
icher, an attorney who special- 
izes in open-source legal mat- 
ters at Patterson, Belknap, 
Webb & Tyler LLP, a New 
York-based law firm. 

“The worst-case scenario is 
that some people have to have 
a pizza party and do some re- 
coding” to replace any alleg- 
edly offending code, Ravicher 
said. “In the most likely sce- 
nario, [SCO has] no case with 
substantial merit.” 

George Weiss, an analyst at 
Gartner Inc., said SCO’s cam- 
paign against Linux could dis- 
courage use of the operating 
system. But Weiss added that 
he hasn’t seen anything like 
that happen since SCO filed 
its lawsuit against IBM. 

Weiss said he has asked SCO 
executives to show him exam- 
ples of specific Unix code in 





Linux, but they have declined 
to do so, citing the ongoing le- 
gal actions. “We really only 
have SCO’s word for it, which 
they’re attempting to make 
very compelling,” he said. 

In an e-mail interview, Lin- 
ux creator Linus Torvalds said 
he would “love to hear what it 
is they consider infringing, 
since I'd like to go back and 
see where it got adopted.” 

Torvalds said it’s possible to 
track the origin of any section 
of the Linux kernel. “We’ve got 
all the history available some- 
where, and it should be pretty 
easy to show when something 
was added and what the lin- 
eage was,” he wrote. D 
Robert McMillan of the IDG 
News Service contributed to 
this story. 


LINUX VENDORS REACT 

Read about how companies like Red Hat 

and SuSE are assessing SCO’s legal claims: 
QuickLink 38513 
www.computerworld.com 
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IT Delivers 


OES IT MATTER? By now you’ve surely heard about 
Nicholas G. Carr’s article in the May 2003 issue of Har- 
vard Business Review, “IT Doesn’t Matter” [QuickLink 
37990]. Carr’s thesis is simple: Now that the IT infra- 
structure has been built out, you can’t get sustainable 
competitive advantage from IT, because anything you can buy, your 
competitors can buy too. So there’s nothing left for IT managers to 


do but cut costs and manage risk. 


Scary, isn’t it? No, not about IT — about Carr. Here’s a big-deal 
business pundit who not only misunderstands IT’s relationship to 


competitive advantage, but who also thinks he’s 
discovered something new. 

Carr is right about one thing: You can’t get 
sustainable competitive advantage by buying 
IT products, services or information. And his 
logic and historical analysis on this point are 
dead-on. Like railroads and electricity before 
it, IT has become infrastructure — widely 
available, affordably priced and standardized. 
That means any competitive advantage you get 
just from buying IT will last only until your 
competitors buy the same products, services 
and information you just bought. 

But, hey — that’s not news! Every experi- 
enced IT (and MIS and data processing) man- 
ager over the past 40 years has doped this out. 

Sure, vendors claim that their hot new prod- 
ucts will revolutionize your business. They 
always have. But we all figured out soon 
enough that new hardware, applications, net- 
works, protocols and programming languages 
don’t give you a lasting business advantage over 
your competitors. Whatever you buy, they can 
buy. Whatever you build, they can build too. 

Carr’s great insight was common wisdom in 
the mainframe 1960s, the time-sharing 1970s, 
the PC 1980s and the Internet 1990s. 
You've never been able to get a sus- 
tainable competitive advantage di- 
rectly from IT. Yes, technology can 
cut costs. But real competitive ad- 
vantage, just from technology? It 
never lasts. Heck, it barely exists. 

Does that mean IT doesn’t mat- 
ter? Then IT hasn’t mattered for 40 
years — since the days when IBM’s 
System/360 introduced standard- 
ized hardware and software, and 
Ross Perot’s EDS invented utility 
computing. 

But IT does matter — or at least 





world’s senior news colum- 
nist, has covered IT for more 
than 20 years. Contact him at ers, IT really does matter. 
frank _hayes@computerworld.com. 


it can. You can get real business advantage with 
technology. You just don’t get it from products, 
services and information. 

You get it from processes, skills and execu- 
tion — the same things that let any business 
——— ate mae in noe that don’t involve IT. 


skills snide execution. They have to — dn must 
choose the products they sell from exactly the 
same pool as their competitors. So Nordstrom 
differentiates itself from Wal-Mart through its 
business processes, its employees’ skills and 
how those employees execute on those proc- 
esses. And Wal-Mart differentiates itself with 
its own processes, skills and execution. 

When IT is used most effectively, when it’s 
really focused on the business it serves, it re- 
inforces and amplifies that differentiation. It 
maximizes the advantages a company gets 
from its business model. It improves processes, 
leverages skills and streamlines execution in 
ways that help a business deliver on its unique 
strengths. It helps Wal-Mart be Wal-Mart and 
Nordstrom be Nordstrom. 

That’s how you get competitive advantage. 

If that sounds a little fuzzy, it’s because every 
company is unique. That’s why 
you’ve got to know your company 
inside and out if you want to deliv- 
er IT that truly serves the busi- 
ness. The kind of IT that doesn’t 
come out of a shrink-wrapped box. 
The kind your competitors can’t 
match by writing a purchase order. 

It’s as much about business and 
people — your business and your 
people — as about technology. But 
it is about technology. 

And when that’s what IT deliv- 


A lot. dB 
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Round and Round 

This department head wants a presence on the corpo- 
rate intranet pronto - one for which a department 
staffer can contro! the links, even though no one on 
that staff knows HTML. Fish scrambles to set up a 
utility that will do the job and later checks the results. 
“The only link is titled ‘Corporate intranet,’ ” sighs fish. 
“That, of course, brings you right back to the home 
page from which the previous page was accessed!” 


Thrilled Seer. 
ce SHARK 


oie nea 
grammer pilot fish to re- 

Pe cme is 
frame report so the sum- 


mary page comes at the 

beginning, not the end. 

eae ; 

work and twice the run- : 

ning time, fish points out | Thanks a Lot 

~ but manager is ada: It takes months, bu 

mant. “Then the light { Oramamer pilot hre- 

bulb went on,” fish says. | works this data access 

“Every time the report program so all employ- 

was run, | tore off the _eescan ue it, not ust 

last page and stapled it i cease 

ee | 

He was thrilled.” | more ever. 
five times 


And Getting Better leet 


30-day deadline to bring . me because I can gener- 
the apps in-house. So in- : ate the reports more 


Quality Control 
er, management opts to. _: It's this pilot fish's first 
outsource again. How t day on the job as a qual- 
will we recover if the ; ity control analyst in the 
new ASP goes bust? IT : [T operations center. 
pilot fish asks. “No prob- . She boots up her work- 
lem,” boss says. “You _ station, and the splash 





The Perfect ‘loy 


for Control Freaks. 


Control 2 to 512 PCs or servers from a single keyboard, 
monitor and mouse console with Tripp Lite KVM Switches! 


Take TOTAL CONTROL with 
Tripp Lite KVM Switches! Not only 
will you be able to manage every 


computer on your network, you'll 


Tripp Lite’s 8-port rackmount KVM Switch is full featured yet economically priced. 
also SAVE VALUABLE TIME, ; ; 
¢ All metal housing—occupies only 1U of rack space 


MONEY AND SPACE. — @ Simple "plug-and-play" setup requires no software configuration 


e "Always-on" technology eliminates need for external power source 
ONE Individual port selection buttons allow for faster CPU selection without scrolling 
in hardware and electricity costs,  ° On-screen display provides simplified menu-driven management 


© Compatible with PS/2, AT*, USB*, Mac* or SUN* systems 


eliminate unnecessary clutter Desktop models also available in 2 and 4-port configurations 


* When used with optional adapters, sold separately. 


and improve productivity by 


FREE 4-Port KVM Switch! 


avoiding unnecessary movement : ; : 
Register online for a chance to win a FREE 4-port KVM Switch. 
between consoles. Visit www.tripplite.com/promo/cw 


No purchase necessary. Some restrictions apply. Vis r Web s 


TRIPP-LITE = 


Tripp Lite UPS System 
Model: SU2200RT2U 


www.tripplite.com 
Tripp Lite is your single source for power protection 1111 W. 35th Street, Chicago, IL 60609 (773) 869-1234 


and connectivity products. ‘ ; 
hoice Award Logi a trademark of Ziff Davis Publishing Hold 





Electronic Arts Stays Real for 100,000 
Sims Online Players with Oracle 


It’s a real bummer when 100,000 online gamers can’t 
get to their game. That's why EA chose Oracle9/ to 
run Sims Online. What do you run? 


ORACLE 


oracle.com/start 
keyword: ea 
or call 1.800.633.1072 





